Broker Link

M.Almosawi — Thu, 06 Feb 2025 06:57:20 GMT

Hi, I need a method to identify endpoints in my environment that are not communicating or linked the broker but Cortex is installed, noting that those machines do not have internet access.

Thanks,

Re: Broker Link

nar — Thu, 06 Feb 2025 10:19:52 GMT

Hi @M.Almosawi

Thank you for reaching to LC!

Scenario1 - The XDR agent is installed without proxy and No internet access.
Suggestion - In this scenario, the agent fails to report or register to the cloud since there is no proxy defined to register or to give the internet so you cannot do any actions from cloud.
The available option is check and set the proxy locally via cytool commands.
Refer - cytool proxy - https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/8.7/Cortex-XDR-Agent-Administrator-Guide/Cytool-for-Windows

Note - I suggest defining the proxy parameter in the installation command itself.

Scenario 2 - The XDR agent is installed without proxy but the internet is present, you will see a column on the admin table to see if there is proxy define else you can define with set agent proxy option from the admin console itself.

Refer - https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Documentation/Set-an-application-proxy-for-Cortex-XDR-agents

Give it a like & Mark Accept as Solution if this helped.

Best,

topic Re: Broker Link in Cortex XDR Discussions

Broker Link

Re: Broker Link