About MatthiasBehn

MatthiasBehn · ‎05-12-2023

Hi All, we are facing an Issue with the WEC on the Broker VM. We configured the Domain Controller and enabled the WEC on the Broker VM. We followed the installation guide which is refered in the Cortex XDR. The Domain Controller shows in the log the following error. " The SSL certificate could not be checked for revocation. The server used to check for revocation might be unreachable. The SSL certificate contains a common name (CN) that does not match the hostname. " The connection is not decrypted and there is no proxy server enabled. Any Ideas ?

MatthiasBehn · ‎02-06-2018

thats an interesting idea. A bit more transperncy with this ip addresses or lets say "services" would be nice.

MatthiasBehn · ‎01-21-2018

I have a customer who asked about traffic which he saw on his Firewall. I looked in firewall logs from several others customers and find the same IP address. It is always a HTTP oder HTTPS connection. The traffic is coming from the 70.42.131.170. According to several internet sources this IP address belongs to PaloAlto Networks https://whatismyipaddress.com/ip/70.42.131.170 Because neither the PaloAlto Website or Google could gave me an answer on this and this not really worth a support case, i thought to place this question here. I think this might be a web crawler or something like this?! I hope someone can clearfy this Regards.

Member Since	‎11-17-2016 02:54 AM
Date Last Visited	‎05-29-2023 04:04 PM
Posts	8
Total Likes Received	1

Online Status	Offline
Date Last Visited	‎05-29-2023 04:04 PM

About MatthiasBehn

Domain Controller can't connect to the Broker VM for Windows Event Collector

Re: Incoming Traffic from Palo Alto IP Address

Incoming Traffic from Palo Alto IP Address

Incoming Traffic from Palo Alto IP Address

Re: Incoming Traffic from Palo Alto IP Address

Domain Controller can't connect to the Broker VM for Windows Event Collector

Re: Incoming Traffic from Palo Alto IP Address

Incoming Traffic from Palo Alto IP Address

Seattle Beta