IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only

getting a 401 Unauthorized during IBM SOAR selftest

  • 1.  getting a 401 Unauthorized during IBM SOAR selftest

    Posted 2 days ago

    Hi Everyone,

    I'm getting a 401 Unauthorized during IBM SOAR selftest.
     
    Error shows: "API Request FAILED: Response Code 401-API key incorrect, blocked, or IP banned."
     
    Proxy is enabled (192.168.10.6:8188) and selftest says Unverified HTTPS requests.
     
    Need help to confirm whether issue is due to API key, proxy blocking headers, or SOAR IP ban.
     
    What SOAR logs should I check to verify the authentication failure?
     
    Any known issues when using API key + HTTP proxy + verify_cert=false?
    Reason for the error : Reason: Unauthorized. Either the API Key has been blocked, the API Credentials are incorre ct or the IP address has been banned. Please review the SOAR logs for more information


    ------------------------------
    Naveen Balaji B
    ------------------------------