Cortex XDR Broker VM (proxy server)

[OrkanAlibayli]

Hello.

In XDR Broker VM i enable proxy server and configure as follows:

Type:HTTP

Address: 192.168.6.167

Port: 8080

But it is not work and in configuration status i see "in progress" even through 3-4 hours.

I want to know if is there anybody who  configured this proxy successfully and how?

Thanks!

[fmoixsante]

Hi @OrkanAlibayli ,

Are you using the latest version of the BrokerVM, v11.3.13? If yes, are you able to stop it and re-activate the proxy again?

[OrkanAlibayli]

Yes, i use BrokerVM v11.3.13. I can stop proxy from BrokerVM web UI and reactivate but nothing change. Again i see "in progress" while hours.

[iscott]

Hello, @OrkanAlibayli .

Can you check the following?:

• Obviously review the IP address, Gateway, and Mask.
• It is important to have the NTP and DNS configured. In order to resolve the DNS requests and sync with the time in the XDR console.
• Be aware of the token. If 24 hours have been passed, the token is invalid.
• If you are using a firewall, and it is too restricted, you have to allow URLs and ports from the following link, for the Broker VM IP Address (Required Resources by Region and Broker VM Resources): https://docs.paloaltonetworks.com/cortex/cortex-xdr/cortex-xdr-pro-admin/get-started-with-cortex-xdr...

Sometimes the steps that I mentioned, do not allow successful communication with XDR Console if aren't configured properly. In my case, was the URLs.

Hope it helps.

Regards,