IBM QRadar

IBM QRadar

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Back to discussions
Expand all | Collapse all

Getting 403 forbidden with proxy configured

  • 1.  Getting 403 forbidden with proxy configured

    Posted Sun April 11, 2021 01:42 PM

    Hi

    I am getting 403 forbidden error in the Qradar Assistant app.log. The log message show :

    YYYY-MM-DD HH:MM:SS,460 [abstract_qpylib.log] [Thread-10] [INFO] - Feb 17 HH:MM:SS 127.0.0.1 [APP_ID/<app_id>][NOT:0000006000][INFO] Proxy.py: make_request: ERROR: HTTPSConnectionPool(host='api.xforce.ibmcloud.com', port=443) : Max retries exceeded with url: /hub/extensions (Caused by ProxyError('Cannot connect to proxy.', error('Tunnel connection failed: 403 Forbidden',)))

    I have set the proxy server for autoupdates, and it work fine. The proxy server is open to all. I received same error message when configuring STIX/TAXII feed.

    Any solution for the issue

    Thank you.

    Regards,

    Jia Kai



    #QRadar
    #Support
    #SupportMigration


  • 2.  RE: Getting 403 forbidden with proxy configured

    Posted Tue April 13, 2021 07:11 AM

    If your proxy working for autoupdates QRadar but not working for qradar assistant, I think the problem is on your proxy, you can tell your admin network to allow xfroce website.



    #QRadar
    #Support
    #SupportMigration