Troubleshooting
Problem
Unable to connect QRadar SOAR App to SOAR with error "Cannot connect to proxy".
Symptom
After upgrading QRadar SIEM, SOAR app stops working with error:
[APP_ID/1302][NOT:0000003000][ERROR] Connection Verification Error HTTPSConnectionPool(host='resilient.example.com', port=443): Max retries exceeded with url: /rest/session (Caused by ProxyError('Cannot connect to proxy.', error('Tunnel connection failed: 503 Service Unavailable',)))
[APP_ID/1302][NOT:0000003000][ERROR] Traceback (most recent call last):
File "/app/views.py", line 748, in _test_config
resilient_client = ResilientClient(host, org, user, password, secure, proxy, clean_cache=True)
File "/app/apis/resilient_client.py", line 45, in __init__
self.session = self.client.connect(user, password, timeout=5)
File "/usr/local/lib/python2.7/site-packages/resilient/co3.py", line 184, in connect
ret = super(SimpleClient, self).connect(email, password, timeout)
File "/usr/local/lib/python2.7/site-packages/resilient/co3base.py", line 151, in connect
return self._connect(timeout=timeout)
File "/usr/local/lib/python2.7/site-packages/resilient/co3base.py", line 160, in _connect
timeout=timeout)
File "/usr/local/lib/python2.7/site-packages/requests/sessions.py", line 535, in post
return self.request('POST', url, data=data, json=json, **kwargs)
File "/usr/local/lib/python2.7/site-packages/requests/sessions.py", line 488, in request
resp = self.send(prep, **send_kwargs)
File "/usr/local/lib/python2.7/site-packages/requests/sessions.py", line 609, in send
r = adapter.send(request, **kwargs)
File "/usr/local/lib/python2.7/site-packages/requests/adapters.py", line 485, in send
raise ProxyError(e, request=request)
ProxyError: HTTPSConnectionPool(host='resilient.example.com', port=443): Max retries exceeded with url: /rest/session (Caused by ProxyError('Cannot connect to proxy.', error('Tunnel connec
tion failed: 503 Service Unavailable',)))Document Location
Worldwide
[{"Type":"MASTER","Line of Business":{"code":"LOB77","label":"Automation Platform"},"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSA230","label":"IBM Security QRadar SOAR"},"ARM Category":[{"code":"a8m0z0000001gyGAAQ","label":"Integrations-\u003EQRadar app"}],"ARM Case Number":"","Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Versions"}]
Log InLog in to view more of this document
This document has the abstract of a technical article that is available to authorized users once you have logged on. Please use Log in button above to access the full document. After log in, if you do not have the right authorization for this document, there will be instructions on what to do next.
Was this topic helpful?
Document Information
Modified date:
16 December 2024
UID
ibm17179056