IBM Security QRadar

 View Only
  • 1.  Data gateway failed to connect to QRoC

    Posted Wed December 01, 2021 04:42 PM
    Hello Experts,

    I am installing a data gateway to connect to QRoC console instance, but i am getting the below error after running the mh_setup script. 

    The hostcontext is failing to start, aslo the downloading of the vpn client package from the QRoC url is also failing.

    1. /opt/qradar/bin/setup_qradar_host.py mh_setup interactive -p
     
    I have permitted the console and VPN IPs on my firewall on port 443 (outbound), 
    Kindly assist!!.
    Thank You,


    ------------------------------
    benlinux
    ------------------------------


  • 2.  RE: Data gateway failed to connect to QRoC

    Posted Mon December 06, 2021 08:04 AM
    Hi,
    Was this problem resolved successfully?
    If not, What environment is the DG in?
    Regards.
    Sree

    ------------------------------
    SREE ANANTHASAYANAM
    ------------------------------



  • 3.  RE: Data gateway failed to connect to QRoC

    Posted Mon December 06, 2021 05:01 PM
    Hello, check on the QROC deployment that the outbound communication
    from the IP hosting the DG is allowlisted. Example org has FW that is
    outbound gateway address x.x.x.x allow traffic from that to QROC.
    Authorized token will be to RFC complaint internal address y.y.y.y
    (that isn't 192.x.x.x.) I've also seen some cases where an nslookup
    console-xxx.qradar.etcetc resolved first to akami and had to allow
    that OR put the IP in the DG hostfile.

    Al




  • 4.  RE: Data gateway failed to connect to QRoC

    Posted Tue December 07, 2021 03:30 AM
    Hello,

    The issue has been resolved.

    I pointed the IP of the console to the console url within the /etc/hosts file.

    Regards,

    ------------------------------
    benlinux
    ------------------------------