XSIAM-ENGINEER · Question #2
During a new Cortex XSIAM deployment, a user consistently experiences timeout sessions while trying to connect to the agent through Live Terminal, even though the firewall engineer has confirmed…
The correct answer is B. SSL Decryption is currently being used to inspect the underlying traffic. Persistent timeout issues with Cortex XSIAM Live Terminal, despite firewall rules being open, are often caused by SSL Decryption inspecting the traffic. Live Terminal relies on secure, end-to-end TLS communication, and decryption breaks this channel, leading to session failures.
Question
During a new Cortex XSIAM deployment, a user consistently experiences timeout sessions while trying to connect to the agent through Live Terminal, even though the firewall engineer has confirmed that all source IP addresses, port 443, and destinations are allowed. What could be causing these persistent timeout issues?
Options
- AUser does not have administrative privileges on the managed endpoint.
- BSSL Decryption is currently being used to inspect the underlying traffic.
- CNTP is not synchronized with the server time.
- DLive Terminal feature is not supported on the current OS.
How the community answered
(32 responses)- A6% (2)
- B84% (27)
- C6% (2)
- D3% (1)
Explanation
Persistent timeout issues with Cortex XSIAM Live Terminal, despite firewall rules being open, are often caused by SSL Decryption inspecting the traffic. Live Terminal relies on secure, end-to-end TLS communication, and decryption breaks this channel, leading to session failures.
Topics
Community Discussion
No community discussion yet for this question.