Hello Mahmood,
there are a lot of things that could be the reason.
You could check assuming you use ip 192.168.0.9:
try to connect to port 443 for example with telnet: "telnet 192.168.0.9 443"
In windows you should see a courser blinking (connection was established)
or connectin to 192.168.0.9... for a while followed by "could not open...."
if the connection was established check if you are using https://192.168.0.9/console
if this still is not working check on the console of your installation if tomcat is running
systemctl status tomcat
if it is not running start it or you could also try to restart it
check if the required port is open on your qradar installation
netstat -nlp | grep 443
should list you a listen port with processid/httpd
if you can not connect to the port but the port is up and listening maybe a firewall is blocking it. Either a firewall between your client and the installation or the local qradar firewall. Usually Qradar does not block this port but you can check it with
iptables -L -n | grep 443
which should list an accept 0.0.0.0 (any) to any with dpt:443
Good luck!
------------------------------
Martin Schmitt
Senior Cyber Defense Consultant
SECUINFRA
Berlin
------------------------------
Original Message:
Sent: Mon December 18, 2023 02:42 PM
From: Mahmood Abdulla
Subject: Qradar connection refused
Hello all
I have a simple problem with my Qradar config
I can't seem to connect to the web interface, when I try using the machine's ip address; 192.xxx.xxx.xx9; it says connection refused?
Am I missing something here?
------------------------------
Mahmood Abdulla
------------------------------