Child(?) Broker VM Setup

[aghesse]

We are a semi-isolated environment with no internet connectivity, and have a customer requirement of having minimal network traffic between our environment and one with internet connectivity.

We are looking at implementing Cortex XDR on our environment, and tying into the Broker VM (Broker-A) that the internet connected environment utilizes.

Would it be possible to create a Broken VM (Broker-B) on our environment, and have our agents communicate directly with it, while having Broker-B pull the updates from Broker-A that is on the internet connected network?

Cortex XDR Cloud -> Broker-A -> Broker-B -> Agents

[nsinghvirk]

Hello @aghesse 

Thanks for reaching out to us. Yes, this is possible. Please follow below steps.

1. Go to Broker-B, right click and select configure.

2. Scroll down to "Proxy Server" option.

3.You can configure Broker-A as a proxy server for this Broker-B by selecting the HTTP type. When selecting HTTP to route Broker VM communication, you need to add the IP Address and Port number (set when activating the Agent Proxy) of Broker-A. This designates the Broker-A as a proxy for this Broker-B. Leave User and Password fields empty.

4. Save the configuration.

Reference-> https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Documentation/Set-up-and-configure-...

Please click Accept as Solution to acknowledge that the answer to your question has been provided.