IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Back to discussions
Expand all | Collapse all

SOAR REST connection Error: 401 unauthorized during selftest

  • 1.  SOAR REST connection Error: 401 unauthorized during selftest

    Posted 2 days ago
    I'm getting a 401 Unauthorized during IBM SOAR selftest.
     
    Error shows: "API Request FAILED: Response Code 401-API key incorrect, blocked, or IP banned."
     
    Proxy is enabled (with internal IP and  Port) and selftest says Unverified HTTPS requests.
     
    Need help to confirm whether issue is due to API key, proxy blocking headers, or SOAR IP ban.
     
    What SOAR logs should I check to verify the authentication failure?
     
    Any known issues when using API key + HTTP proxy + verify_cert=false?
    Reason for the error: Unauthorized. Either the API Key has been blocked, the API Credentials are incorre ct or the IP address has been banned. Please review the SOAR logs for more informati


    ------------------------------
    Naveen B
    ------------------------------


Related Content