Palo Alto Networks XSIAM Engineer — Question 17

During a new Cortex XSIAM deployment, a user consistently experiences timeout sessions while trying to connect to the agent through Live Terminal, even though the firewall engineer has confirmed that all source IP addresses, port 443, and destinations are allowed.
What could be causing these persistent timeout issues?

Answer options

• A. User does not have administrative privileges on the managed endpoint.
• B. SSL Decryption is currently being used to inspect the underlying traffic.
• C. NTP is not synchronized with the server time.
• D. Live Terminal feature is not supported on the current OS.

Correct answer: B

Explanation

The correct answer is B because SSL Decryption can interfere with the connection to the agent by inspecting and potentially altering the traffic, leading to timeouts. Option A is incorrect since administrative privileges don't directly affect connection timeouts. Option C is not the cause, as NTP synchronization issues typically do not result in session timeouts. Option D is also incorrect because the OS itself does not inherently prevent connecting through Live Terminal.