Forum Discussion

Mike_Suding's avatar
Mike_Suding
Former Employee
6 years ago

Collector could not verify/register if using Palo Alto SSL decryption feature

Just in case this helps other customers... SYMPTOMS:  The Windows collector installed ok and the two Collector services were running but the collector could not finish the verification/regist...
collector
Palo Alto
Matthew_Dunham's avatar
Matthew_Dunham
Former Employee
6 years ago

Note that LogicMonitor does not endorse running Collectors with the EnforceLogicMonitorSSL configuration item set to "false". This setting disables certificate verification the Collector uses to authenticate our service platform before sending sensitive data. By disabling this, you risk exposing the data your Collector sends upstream to a man-in-the-middle attack.

Where a decryption proxy is in use, we recommend that you disable proxying for Collector traffic as Mike specifies above.