macOS Network Filter Causing Issues with shared VM connections

[KTaig]

Hi Everyone, 

We are a new customer for Cortex XDR and the network filter seems to be killing our ability to share a connection to our Windows VM's from our macOS host while using our SonicWall VPN. If the VPN is disconnected connection works fine, when Cortex XDR is uninstalled it also works fine, as soon as Cortex is installed the shared connection dies. Any ideas?

[KTaig]

Hey,

I didn't have time to get to this today but 1 thing I see that would be an issue getting this information is the routes with the VPN on. The VPN is on the macOS not the Windows VM, as soon as it turns on the network on the VM dies. I don't think it will see any routes because its no longer getting an internet connection at all.

[gjenkins]

---

@KTaig wrote:

Hey,

I didn't have time to get to this today but 1 thing I see that would be an issue getting this information is the routes with the VPN on. The VPN is on the macOS not the Windows VM, as soon as it turns on the network on the VM dies. I don't think it will see any routes because its no longer getting an internet connection at all.

---

Hi @KTaig ,

If we don't have visibility into the device due to the Internet connection being lost, and there doesn't appear to be anything wrong with your Cortex XDR agent configuration, then I think that the next best step would be to open a ticket with Support. They will request the Support logs and be able to attempt an offline analysis given the logs that you've provided.  Please open a case with them here and upload those logs whenever possible.