Error When Opening AIOPs Application

[dmertz]

Just to preface this, I have already registered for AIOps and used it several times before this issue popped up. I can no longer login to AIOps as I receive the following error whenever I attempt to open the application.

Error

Unable to retrieve regional info. Please navigate to this application from the Application Hub to continue.

[dmertz · Accepted solution]

I figured out what is going on here. The API call for that site is coming from 'api.prod.reporting.paloaltonetworks.com.' This is getting blocked by our firewall because that domain has an incomplete certificate chain which you can see by plugging it into ssllabs.com. Our decryption profile sees that as 'untrusted' and drops the traffic.

I've requested that Palo Alto fix the certificate chain for 'api.prod.reporting.paloaltonetworks.com.'

[dtaneja]

Hi @dmertz,

Greetings from Palo Alto Networks!

You need to ensure that you have allowed the following FQDNs in order to successfully use AIOps for NGFW.

Domains to Access AIOps for NGFW

Allow these domains in order to access the AIOps for the NGFW application, regardless of your geographic region.

*.prod.di.paloaltonetworks.cloud
*.paloaltonetworks.com
*.prod.di.paloaltonetworks.com
*.prod.reporting.paloaltonetworks.com
*.receiver.telemetry.paloaltonetworks.com
https://storage.googleapis.com

Please refer to the below document for more details:

https://docs.paloaltonetworks.com/aiops/aiops-for-ngfw/get-started-with-aiops/fqdns

Regards,
Devanshu Taneja
Product Specialist
Palo Alto Networks
https://live.paloaltonetworks.com/t5/aiops-for-ngfw-discussions/bd-p/AIOps_for_NGFW_Discussions

*Don’t forget to accept the solution provided!

[dtaneja]

Hi @dmertz,

Hope you are doing well.

Let us know if you need any additional help on this.

Regards,
Devanshu Taneja
Product Specialist
Palo Alto Networks
https://live.paloaltonetworks.com/t5/aiops-for-ngfw-discussions/bd-p/AIOps_for_NGFW_Discussions

*Don’t forget to accept the solution provided!

[dmertz]

Hello,

This did not have anything to do with the issue I experienced. I replied to the post and marked it as the solution already.

[dmertz]

No, I don't. I marked my reply as the solution.