If you have an isolated network that is prevented from connecting to the Cortex Data Lake, which type of Broker VM setup can you use to facilitate…

If you have an isolated network that is prevented from connecting to the Cortex Data Lake, you can

use the Local Agent Proxy setup to facilitate the communication. The Local Agent Proxy is a type of

Broker VM that acts as a proxy server for the Cortex XDR agents that are deployed on the isolated

network. The Local Agent Proxy enables the Cortex XDR agents to communicate securely with the

Cortex Data Lake and the Cortex XDR management console over the internet, without requiring

direct access to the internet from the isolated network. The Local Agent Proxy also allows the Cortex

XDR agents to download installation packages and content updates from the Cortex XDR

management console. To use the Local Agent Proxy setup, you need to deploy a Broker VM on the

isolated network and configure it as a Local Agent Proxy. You also need to deploy another Broker VM

on a network that has internet access and configure it as a Remote Agent Proxy. The Remote Agent

Proxy acts as a relay between the Local Agent Proxy and the Cortex Data Lake. You also need to install

a strong cipher SHA256-based SSL certificate on both the Local Agent Proxy and the Remote Agent

Proxy to ensure secure communication. You can read more about the Local Agent Proxy setup and

how to configure it here1 and here2. Reference:

Local Agent Proxy

Configure the Local Agent Proxy Setup