SIEM or ATD connection fails when ePO Proxy is configured

Technical Articles ID: KB93964
Last Modified: 2023-07-03 06:58:08 Etc/GMT

Environment

Endpoint Detection and Response (EDR) 3.x
ePolicy Orchestrator (ePO) 5.9 and later

Problem

Your ePO environment has a proxy configured. You try to configure the ATD or SIEM connection within the EDR Settings page. But, you try a connection and you see that the proxy helper utility doesn't allow the connection.

The URI for the connection is configured in the exclusion list. When you disable the proxy configuration in ePO, the connection is successful.

Solution

NOTE: Any future product functionality or releases mentioned in the Knowledge Base are intended to outline our general product direction and should not be relied on, either as a commitment, or when making a purchasing decision.

Technical Support is investigating this issue. If you experience this issue, log on to the ServicePortal and create a Service Request. Include this article number in the Problem Description field.

To contact Technical Support, go to the Create a Service Request page and log on to the ServicePortal.

If you are a registered user, type your User ID and Password, and then click Log In.
If you are not a registered user, click Register and complete the fields to have your password and instructions emailed to you.

Workaround

Add a network route within your proxy. This route can allow local traffic between your ePO server and your SIEM or ATD server through the proxy.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

SIEM or ATD connection fails when ePO Proxy is configured

Environment

Problem

Solution

Workaround

Affected Products

Languages:

Title

Title

Knowledge Center

SIEM or ATD connection fails when ePO Proxy is configured

Environment

Problem

Solution

Workaround

Affected Products

Languages:

Choose your region

Title

Title