IBM QRadar SOAR

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

Adding AppHost to Resilient server in IBM Cloud

  • 1.  Adding AppHost to Resilient server in IBM Cloud

    Posted Mon August 09, 2021 10:53 AM
    Some fun and games installing Resilient, AppHost and QRadar in IBM Cloud instance.

    Issues:
    * IBM Cloud NAT to access Resilient UI
    * Can Putty to outside address of AppHost, but need copy/paste

    Solution that took a bit to figure out....not because it was hard.....I just did not connect the dots... :)
    * SSH to inside IP address from the external IP Address on the AppHost
    * Edit the AppHost pairing info (in Notepadd++) to change the external IP Address of the Resilient server to the internal IP
    * paste exited pairing info into the 'manageAppHost install' CLI command when prompted.

    Seems simple now. :)Same goes for QRadar integration parameters.  Just makes you love NAT even more.
    JW

    ------------------------------
    John Wyckoff
    QRadar Dude and Cloud Security Engineer
    ------------------------------