Broker Link

[M.Almosawi]

Hi, I need a method to identify endpoints in my environment that are not communicating or linked the broker but Cortex is installed, noting that those machines do not have internet access.

Thanks,

[nar]

Hi @M.Almosawi 

Thank you for reaching to LC!

Scenario1 - The XDR agent is installed without proxy and No internet access.
Suggestion - In this scenario, the agent fails to report or register to the cloud since there is no proxy defined to register or to give the internet so you cannot do any actions from cloud.
The available option is check and set the proxy locally via cytool commands.
Refer - cytool proxy - https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/8.7/Cortex-XDR-Agent-Administrator-Guide/Cytoo...

Note - I suggest defining the proxy parameter in the installation command itself.

Scenario 2 - The XDR agent is installed without proxy but the  internet is present, you will see a column on the admin table to see if there is proxy define else you can define with set agent proxy option from the admin console itself.

Refer - https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Documentation/Set-an-application-pr...

Give it a like & Mark Accept as Solution if this helped.

Best,