XSIAM-ENGINEER: Palo Alto Networks Certified XSIAM Engineer

By Palo Alto Networks · Question Mode

QuestionQ15

VerifiedMaintenance and Troubleshooting

During a new Cortex XSIAM deployment, a user repeatedly encounters session timeouts when attempting to connect to the agent through Live Terminal, although the firewall engineer has confirmed that all source IP addresses, port 443, and destinations are allowed.

What could be responsible for these persistent timeout issues?

Explanation

Live Terminal uses the regional lrc-<region>.paloaltonetworks.com HTTPS/WSS service on TCP port 443. SSL decryption can interfere with the agent’s TLS/WebSocket communication even when firewall IP, port, and destination rules allow the traffic; the required Cortex FQDNs should be excluded from SSL decryption.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!