topic Broker VM ssl connection in Cortex XDR Discussions

Broker VM ssl connection

Aristooo — Wed, 11 Jun 2025 07:40:43 GMT

Hi.

I have configured a proxy for the Broker VM on the endpoints. The Cortex XDR agents on these endpoints are establishing SSL connections to the Broker VM over port 443.

Should the agents on the endpoints establish an SSL connection to the Broker VM over port 443?
If yes, what is the purpose of this connection?

Re: Broker VM ssl connection

eluis — Wed, 11 Jun 2025 10:57:20 GMT

Hi Aristooo,

The connection between XDR agents and the Broker VM over port 443 is used for various data collection and service relay functions, depending on which Broker VM apps you’ve enabled.

Please check the documentation related to these communications on the link down below. It is mentioned on the requirements section:

https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Documentation/Set-up-and-configure-Broker-VM#

If you feel this has answered your query, please let us know by clicking like and on "mark this as a Solution". Thank you.

Luis

Re: Broker VM ssl connection

Aristooo — Wed, 11 Jun 2025 12:00:35 GMT

Hi @eluis .

Thanks for response!