Installed Linux Servers not reflecting in Endpoint

[Shashanksinha]

Hello , 

There are a few Linux servers in which cortex XDR was deployed but it is not getting reflected in our endpoint. 

Performed  check-in using the below command for the servers:

 root@ubuntu:~$ /opt/traps/bin/cytool checkin

and configured the proxy (Broker VM)  on the server using the below command

        /opt/traps/bin/cytool proxy set IP:PORT

Still unable to see it in our endpoint. 

Please guide how to get those servers in the endpoint. 

[neelrohit]

**Editing the previous comment***

Hi @Shashanksinha , 

Thank you for writing to live community!

For linux endpoints you cannot run the cytool proxy set to set the proxy. The linux endpoints need to have a config file which comes with the installation package and you have to define the proxy in the config file and move it to the etc/panw folder. Then install Cortex XDR agents after that. Also, config files cannot be configured post installation and hence you will have to uninstall the agents and redo the process.  As a result of the incorrect installation procedure, the agents are not able to connect to the proxy and hence not to the Cortex XDR cloud to be listed in the endpoints list.

Please go through the Cortex XDR Administration Guide for Linux installation for detailed walkthrough

Hope this answers your question!

Please mark the answer as "Accept as Solution" if it does!

Regards

[Shashanksinha]

Hi @neelrohit 

Thanks for the response . 

I had one more query .

I have observed even though the proxy is not set the servers/hosts is shown in the  ALL ENDPOINTS .

Regards

[neelrohit]

Hi @Shashanksinha ,

This is the expected behaviour. Endpoints will connect to the cloud if they have connectivity even without the proxy. The proxy is used only is cases where you have a limitation to open the networks so that XDR agent can connect to the cloud and hence we allow the proxy to act as intermediate source for the agent communication.

[Shashanksinha]

Hi @neelrohit 

if possible could you please let us know why the installed Linux  server  is not being shown in "ALL ENDPOINTS"

[neelrohit · Accepted solution]

@Shashanksinha ,

Please find my answer above. I am echoing the same comment down below:

Thank you for writing to live community!

For linux endpoints you cannot run the cytool proxy set to set the proxy. The linux endpoints need to have a config file which comes with the installation package and you have to define the proxy in the config file and move it to the etc/panw folder. Then install Cortex XDR agents after that. Also, config files cannot be configured post installation and hence you will have to uninstall the agents and redo the process. 

Please go through the Cortex XDR Administration Guide for Linux installation for detailed walkthrough

Hope this answers your question!

Please mark the answer as "Accept as Solution" if it does!

[neelrohit]

@Shashanksinha ,

Please mark the response as "Accept as Solution" if this was able to help you with your query.

Regards