Endpoints not showing on console

cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 

Endpoints not showing on console

L3 Networker

Hi, 

 

Cortex XDR is installed on the client's endpoints but it is not visible on our console, what could be the possible reason behind this?

 

Thanks

4 REPLIES 4

L3 Networker

Hello @Shahwaz_Md,

There could be various reasons for the endpoint not showing in the console. 
But primarily if the agent does not have network access to all required resources, it may fail to communicate to the Cortex XDR cloud server and does not show up on the console.
 
Check if the agent machine able to reach all cloud URLs.
To know the list of cloud resources to allow from the agent side, refer below article.
 
Thank you!

L3 Networker

Hi Creddy,

 

Thanks for the reply, all the URLs in the list are allowed from the Agent side but still we are facing the issue.

Hi @Shahwaz_Md ,

 

Agent does not reflect primarily because of the network connectivity and there is a lot of certainty that one or more than one network element(firewalls, authentication proxy, etc.) is blocking the connection. Inorder to validate it, you can try couple of things:

  1. Open cmd as administrator, 
  2. cd C:\Program files\Palo Alto Networks\Traps\       ///( for windows endpoints)
  3. cytool connectivity_test, add uninstall password <possibly "Password1" or anything that you have set>
  4. Observe the output. It should come up something like the screenshot below:
    neelrohit_0-1675246860604.png

     

Second option is do a traceroute to any of the IPs listed in the URL, depending upon your region. (Eg. EU) and then if there is an RTO output, you would know the issue. 

 

If you need additional guidance, please retrieve the TSF from the agent of the affected endpoint and open a support case for analysis

 

Regards,

 

L1 Bithead

1. Check internal firewall.

2. Check enterprise firewall if any of the pre-requisite url is blocked

3. If brokervm is implemented, check if proxy is set.

4. Check if services is up by > cytool runtime query

  • 1918 Views
  • 4 replies
  • 0 Likes
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!