Cortex XDR Broker VM internal communication.

[Vinothkumar_SBA]

Hi Team,

I have a query regarding the installation of the Broker VM in our organization. We have successfully installed it internally. However, when we tried to access the URL https://<brokervm-ip>:4443 internally, it failed. After whitelisting the Palo Alto domain URLs, we were able to successfully access the URL https://<brokervm-ip>:4443 internally.

My question is: is it necessary to whitelist the Palo Alto domain URLs to access the URL https://<brokervm-ip>:4443 internally?

[jmazzeo]

Hi @Vinothkumar_SBA, thanks for reaching us using the Live Community.

In our requirements doc about URLs and IPs to be enabled, the tenant URL is a requirement for the Borker VM. If the Broker doesn't reach the tenant, it doesn't know whar services are needed to be enabled.

If this post answers your question, please mark it as the solution.

[Vinothkumar_SBA]

Hi Jmazzeo,

Thank you for your response. However, we have disconnected the broker VM from the internet. We also tried accessing the URL https://<brokervm-ip>:4443 locally, and it successfully opened. How is this possible?