Cortex XSOAR DNS resolving issue

orkhan_alibayli — Fri, 19 Jul 2024 14:09:36 GMT

Hi all,

I am trying to integrate Cortex XDR with Cortex XSOAR. I have configured api key and other settings . But sometimes this integration works, sometimes do not, because of DNS resolving issue.

I dont think it is our DNS servers problem, because when i nslookup same domain from command line (where xsoar is installed) resolution is successfull.

Have anybody saw this kind of problem?

I have addedd screenshots of problem.

Re: Cortex XSOAR DNS resolving issue

JP_Nieuwendam — Tue, 20 Aug 2024 18:45:03 GMT

Hi @orkhan_alibayli Can you confirm your xSoar version and if you and on-prem or using SaaS? It looks like on-prem since you are able to run command line nslookup. I think it might be a problem with your local DNS settings. The answer should not be non-authoritative as the NS lookup should find an active IP while searching for the domain. You may want to check with your Network team is the Local DNS server is set with the correct top level and authoritative server fall backs. The IP is correct however

EU (Europe)— 34.90.67.58

Could you additionally try from the command line a ping to the host and also a traceroute to the host? Also could you try a curl -vvv https://youURL.com for a verbose output of an HTTPS attempt to the host? Please do block or obfuscate any company or sensitive info before posting those here. Thanks

topic Re: Cortex XSOAR DNS resolving issue in Cortex XSOAR Discussions

Cortex XSOAR DNS resolving issue

Re: Cortex XSOAR DNS resolving issue