CB Response Cloud: Unable to connect to Cb Protection Server
search cancel

CB Response Cloud: Unable to connect to Cb Protection Server

book

Article ID: 290452

calendar_today

Updated On:

Products

Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Whiling integrating CB Response with CB Protection, Response says "Unable to connect to Cb Protection Server".

Coreservices/debug.log shows:
<err> cb.core.actions.types.http_request.action - Failure sending HTTP post 
Traceback (most recent call last): 
File "/usr/share/cb/virtualenv/lib/python2.7/site-packages/cb/core/actions/types/http_request/action.py", line 79, in _on_event 
File "/usr/share/cb/virtualenv/lib/python2.7/site-packages/cb/core/actions/types/http_request/http_router.py", line 40, in post 
File "/usr/share/cb/virtualenv/lib/python2.7/site-packages/cb/core/actions/types/http_request/http_router.py", line 50, in http_request 
File "/usr/share/cb/virtualenv/lib/python2.7/site-packages/cb/utils/httpcomms.py", line 126, in post 
File "/usr/share/cb/virtualenv/lib/python2.7/site-packages/cb/utils/httpcomms.py", line 146, in _make_call 
File "/usr/share/cb/virtualenv/lib/python2.7/site-packages/cb/utils/httpcomms.py", line 200, in __make_call 
File "/usr/share/cb/virtualenv/lib/python2.7/site-packages/requests/api.py", line 116, in post 
return request('post', url, data=data, json=json, **kwargs) 
File "/usr/share/cb/virtualenv/lib/python2.7/site-packages/requests/api.py", line 60, in request 
return session.request(method=method, url=url, **kwargs) 
File "/usr/share/cb/virtualenv/lib/python2.7/site-packages/requests/sessions.py", line 533, in request 
resp = self.send(prep, **send_kwargs) 
File "/usr/share/cb/virtualenv/lib/python2.7/site-packages/requests/sessions.py", line 646, in send 
r = adapter.send(request, **kwargs) 
File "/usr/share/cb/virtualenv/lib/python2.7/site-packages/requests/adapters.py", line 516, in send 
raise ConnectionError(e, request=request) 
ConnectionError: HTTPSConnectionPool(host='XXXXXX.local', port=443): Max retries exceeded with url: /actions/watchlistEvent.php (Caused by NewConnectionError('<urllib3.connection.VerifiedHTTPSConnection object at 0x7f9833d11d10>: Failed to establish a new connection: [Errno 4] ARES_ENOTFOUND: Domain name not found',))

Environment

  • CB Response Cloud: 6.X
  • CB Protection: 7.2+

Cause

The host domain of Protection server is not resolvable by the Response server.

Resolution

Need a public IP/URL of Protection server for the integration.