IBM QRadar

IBM QRadar

Join this online topic group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.


#Security
#QRadar
#SecuringhybridcloudandAI
 View Only
  • 1.  Getting 403 forbidden with proxy configured

    Posted 04/11/21 01:42 PM

    Hi

    I am getting 403 forbidden error in the Qradar Assistant app.log. The log message show :

    YYYY-MM-DD HH:MM:SS,460 [abstract_qpylib.log] [Thread-10] [INFO] - Feb 17 HH:MM:SS 127.0.0.1 [APP_ID/<app_id>][NOT:0000006000][INFO] Proxy.py: make_request: ERROR: HTTPSConnectionPool(host='api.xforce.ibmcloud.com', port=443) : Max retries exceeded with url: /hub/extensions (Caused by ProxyError('Cannot connect to proxy.', error('Tunnel connection failed: 403 Forbidden',)))

    I have set the proxy server for autoupdates, and it work fine. The proxy server is open to all. I received same error message when configuring STIX/TAXII feed.

    Any solution for the issue

    Thank you.

    Regards,

    Jia Kai



    #QRadar
    #Support
    #SupportMigration


  • 2.  RE: Getting 403 forbidden with proxy configured

    Posted 04/13/21 07:11 AM

    If your proxy working for autoupdates QRadar but not working for qradar assistant, I think the problem is on your proxy, you can tell your admin network to allow xfroce website.



    #QRadar
    #Support
    #SupportMigration