XDR Agent Reconnecting

M.Arevalo — Mon, 20 Jan 2025 02:33:23 GMT

Agent Version: 8.6.0.3704
Last Seen: 01 January 2025

We had to remove the protection since it is cutting off connection via SSH for Backup purposes. Moreover, with protection off, it is able to backup consistently.

My question is, we have I already raised a ticket to TAC but they are unsure on what module that is cutting connection via SSH. We have already whitelisted the IP Address however it is showing incidents that it is an SSH Bruteforce on the Firewall. It is legitimate. What other causes that this happens? And has anyone experienced these kinds of issues?

Next how can i reconnect the agent, kindly refer to the attached photo. I have tried cytool checkin and it is having errors.

Thank you.

topic XDR Agent Reconnecting in Cortex XSIAM Discussions

XDR Agent Reconnecting