Forum Discussion

maple85's avatar
maple85
Brass Contributor
Mar 10, 2020
Solved

Error installing Azure ATP Sensor on DC

We have the ATP Sensor installed on 2 DCs. Both worked till last week. Since there just one Sensor is working. On the Other DC it stopped communicating. When i RDP on the Server i saw the Service w...
  • SathishKumarPatchaiappan's avatar
    SathishKumarPatchaiappan
    Jul 02, 2020

    JTUKTECH Proxy was the issue. 

    I followed these steps https://docs.microsoft.com/en-us/azure-advanced-threat-protection/configure-proxy#configure-the-proxy  and finally it fixed couple of weeks back.

     

     

maple85's avatar
maple85
Brass Contributor
Mar 23, 2020

EliOfek

Problem solved.

I tried it again today with live log on our FW.

Found the Azure IP who was decrypted.

 

Thanks, Philip  

Razmi_Patel's avatar
Razmi_Patel
Brass Contributor
May 13, 2020

maple85, hijacking this conversation as it mentions a CRL:-)

@Eli Ofek

 

I don't see any mention of ports required for the CRL
https://docs.microsoft.com/en-us/azure-advanced-threat-protection/configure-proxy

https://docs.microsoft.com/en-us/azure-advanced-threat-protection/atp-prerequisites#ports



SSL (*.atp.azure.com) TCP 443 Azure ATP cloud service Outbound


SSL(localhost) TCP 444 localhost Both

 

Is there more detail available?

Thanks.
Razmi

  • EliOfek's avatar
    EliOfek
    Icon for Microsoft rankMicrosoft
    May 13, 2020

    Razmi_Patel , you don't normally need open ports for CRLs as far as I know as long as they are updated correctly .
    I am not an SME on this one, but I think those are usually updates by windows updates...
    If anyone knows otherwise please feel free to correct me 🙂

    • Razmi_Patel's avatar
      Razmi_Patel
      Brass Contributor
      May 18, 2020

      EliOfek 

      Thank you. I'm sure we will find out soon enough:-)

Resources