About FrankBussink

Hello,   it's not really a discussion but more a let's document two actual issue I went through. In rare cases when you have to deploy Pathfinder in a not direct connection to the internet (no DNS, and no web), then this might be of interest to you. In Pathfinder you can set the proxy settings. In my case it is a non-authenticated proxy, so I just added proxy address and proxy port. When doing a Connectivity check, all tests failed ! and no packets were sent to the proxy server.   Connectivity checks errors Looking into the logs we can see the cause. BUG1 : This is due because the scripts implemented in 16.02 sends commands to curl but fails because the username = '' Workaround : enter any username and it works All Connectivity tests are now working but I still cannot pair. I get a message, please authorize in admin UI, but nothing appears in the pathfinder management UI, and then it fails miserably. Looking at the logs (edited), we can see "internal IP address is invalid" because it's empty !   The cause of this is a bit complex but basically it's related  to finding it's own ip based on the direct name resolution (dns) of your XDR Analyzer instance.  Workaround BUG2: find your instance name : example <xxxxxxxxxxxxcbaced8>.magnifier.eu.paloaltonetworks.com (replace with your own instance ID) And create a 'A' DNS record for this entry which should resolve to 154.59.126.13. Depending on your installation it can be hard to add another zone paloaltonetworks.com so another easier way is to use the DNSproxy feature of the PANOS with static entries ... View more