topic Re: an issue with Forcepoint web Security with Cortex XSOAR Integration in Cortex XSOAR Discussions

an issue with Forcepoint web Security with Cortex XSOAR Integration

ALabeb — Tue, 26 Mar 2024 22:00:50 GMT

Hello Dears,

I have an issue with Forcepoint web Security with Cortex XSOAR Integration.

kindly find the logs:
2024-03-26 10:36:37.6939 error Unable to do Http req to url : https:// :15873/api/web/v1/categories/start [error 'Post "https://10.200.30.242:15873/api/web/v1/categories/start": tls: server selected unsupported protocol version 302'] (source: /builds/GOPATH/src/gitlab.xdr.pan.local/xdr/xsoar/server/util/jshttp/jshttp.go:219)
2024-03-26 10:36:37.6940 error JS error: error - request failed. error number -1 at startTransaction (script:81:17(48)) (source: /builds/GOPATH/src/gitlab.xdr.pan.local/xdr/xsoar/server/services/automation/jsrunner.go:255)
2024-03-26 10:36:37.6940 error Failed to run script: Forcepoint__instance_14f8bc695-258d-4096-890f-7be45dcdd833_Forcepoint_test-module with image: [error 'error - request failed. error number -1 at startTransaction (script:81:17(48))'] (source: /builds/GOPATH/src/gitlab.xdr.pan.local/xdr/xsoar/server/services/automation/runner.go:68)
2024-03-26 10:36:37.6941 debug No entries were found for the [InternalTestModuleInstance] command run (source: /builds/GOPATH/src/gitlab.xdr.pan.local/xdr/xsoar/server/services/telemetry/realtime_metrics.go:547)
2024-03-26 10:36:37.6942 error Instance test failed: Forcepoint Web Security | Forcepoint_instance_14f8bc695-258d-4096-890f-7be45dcdd833 [error 'Script failed to run: error - request failed. error number -1 at startTransaction (script:81:17(48)) (2603)'] (source: /builds/GOPATH/src/gitlab.xdr.pan.local/xdr/xsoar/server/services/integrations.go:1197)
2024-03-26 10:36:37.6943 info [POST] "/settings/integration/test" 200 32.609737351s (source: /builds/GOPATH/src/gitlab.xdr.pan.local/xdr/xsoar/server/web/middleware.go:82)

Re: an issue with Forcepoint web Security with Cortex XSOAR Integration

bwebb — Mon, 01 Apr 2024 18:53:42 GMT

Hi @ALabeb -- Given the nature of troubleshooting these kinds of issues, I recommend reaching out to your Customer Success team or the Support team for assistance.

Re: an issue with Forcepoint web Security with Cortex XSOAR Integration

mcvicarr — Thu, 11 Apr 2024 20:19:17 GMT

I believe this issue is due to ForcePoint's API not supporting anything past TLS 1.0, which was removed in XSOAR 6.11 or 6.12.

You mostlikely either need to roll back your XSOAR upgrade or Proxy ForcePoint's API endpoint with something that can talk using legacy TLS versions.

Re: an issue with Forcepoint web Security with Cortex XSOAR Integration

assubramania — Mon, 02 Sep 2024 07:16:11 GMT

Hi Team,

My customer is looking for some sample python code that calls the API with the latest TLS standards to solve the issue?

Any suggestions please.

Thanks

Re: an issue with Forcepoint web Security with Cortex XSOAR Integration

mcvicarr — Tue, 03 Sep 2024 15:11:49 GMT

Since the integration is written in Javascript, you would have to rewrite it to use Python, but that would then let you use a legacy version of Python with TLS 1.0 support.
You can reverse proxy the ForcePoint API endpoint with another Technology (nginx, F5, IIS, etc) which can allow you to talk without code changes, at the cost of an infrastructure change.

Re: an issue with Forcepoint web Security with Cortex XSOAR Integration

s.soar212051 — Thu, 04 Sep 2025 10:56:59 GMT

Is it working in the XSOAR version 6.14?