Computers no longer showing in Console

[O.Faheem]

Hi,

We have staff members who work in the mining area and do not connect for a very long time; in some cases we have seen they came back from the sites after four months. Additionally, their computers do not appear on the Cortex XSIAM console, or I would use the word drops off. In this scenario, they reconnect to either our network or the internet. Is there a way that agents get automatically installed or updated once the outdated version of the agent is found on the network?

Regards,

[Antony_Chan · Accepted solution]

Hello @O.Faheem,

First, I would suggest you to review the configuration under "Agent Configuration -> Agent Status". Depending on your setup, the host(s) that lost connection for an X amount of days will be deleted automatically. If you think this need to be tweak, this would be easiest way.

Speaking of endpoints that already deleted from the console, you can only have a few routes:

1. Reinstall it manually or using tools like SCCM/Ansible, etc.
2. Run cytool command to re-establish the connection to the server. Something like cytoolreconnect force (Seek Palo Support for to confirm on this.)