topic Re: Connect New XDR Tenant with Existing Broker VM in Cortex XDR Discussions

Connect New XDR Tenant with Existing Broker VM

Ariq_Aziz — Thu, 04 Jan 2024 04:18:19 GMT

Hello

We are migrating our existing XDR tenant due to region issue. We have got our new tenant and Basic configurations are done.
I have a question regarding the BrokerVM. Do we need to create new broker VM for the new tenant or we can use our existing Broker VM ? and If possible to connect the new tenant with the existing Broker VM whats the procedure ?

Are there any impacts using the existing Broker VM?

Thanks

Ariq

Re: Connect New XDR Tenant with Existing Broker VM

Rocky-25 — Thu, 04 Jan 2024 08:54:24 GMT

Hi Ariq

A deployed broker can be unregistered via the Cortex console. Select Broker > Right Click > Remove Broker

Once unregistered the broker appears like a new broker. You can generate a registration token from the new tenant. Add Broker > Generate Token

I've done the same procedure a few weeks ago and worked well without impacts:

- Unregister first broker, register to new tenant

- Migrate all endpoints

- Unregister second broker, register to new tenant

Move Agents Between Managing Servers • Cortex XDR Pro Administrator Guide • Reader • Palo Alto Networks documentation portal

Best Regards

Roman

Re: Connect New XDR Tenant with Existing Broker VM

Ariq_Aziz — Sun, 07 Jan 2024 21:28:17 GMT

Hi Roman

How did you migrate all endpoints ?

TIA

ARIQ

Re: Connect New XDR Tenant with Existing Broker VM

Rocky-25 — Mon, 08 Jan 2024 06:17:39 GMT

Hi Ariq

The detailed steps are documented here: Move Agents Between Managing Servers • Cortex XDR Pro Administrator Guide • Reader • Palo Alto Networks documentation portal

Best Regards

Re: Connect New XDR Tenant with Existing Broker VM

Ariq_Aziz — Mon, 08 Jan 2024 10:08:30 GMT

You are a XDR champ mate. lots of thanks .

I took some to figure it out like how to open the console using RightClick +Alt ... lolz. Other than that, all ok so far.
However , I got one more silly question. To make sure the existing tenant doesn't get any interruption, My plan is to Use a new Broker VM at the moment.

So, if I unregister the broker VM and connect with the new tenant using token, will the old tenant have any problems ? Like no updates ? As far i remember We have selected upgrade using both Internet and Broker VM for the content updates.

Cheers

ARIQ

Re: Connect New XDR Tenant with Existing Broker VM

Rocky-25 — Mon, 08 Jan 2024 10:23:48 GMT

Hi Ariq

You're welcome 😉

Just make sure the endpoints have still a possibility to reach the Cortex backend. Resources Required to Enable Access • Cortex XDR Pro Administrator Guide • Reader • Palo Alto Networks documentation portal
For this reason I left one broker in the old tenant until all endpoints are migrated.

Best Regards

Re: Connect New XDR Tenant with Existing Broker VM

SeanDeHarris — Fri, 14 Feb 2025 08:16:32 GMT

@Rocky-25 hi roman,

Once the existing BrokerVM and the endpoints migrated to new tenant.
Under the new tenant, do we need to still need to set up agent proxy (with the existing BrokerVM IP) for all the endpoint? Assuming the IP of BrokerVM has still the same.