IBM xforce connector

[Osama-Ahmed]

Hello All,

I'm facing an issue with the IBM X-Force Connector. I receive the following error when using the IP reputation feature:

HTTPSConnectionPool(host='api.xforce.ibmcloud.com', port=443): Max retries exceeded with URL: /ipr/history/185.213.164.197 (Caused by NewConnectionError('<urllib3.connection.HTTPSConnection object at 0x7f66510dd9a0>: Failed to establish a new connection: [Errno -2] Name or service not known'))

[jankit6]

@Osama-Ahmed 
The error indicates an issue with DNS resolution:
Failed to establish a new connection: [Errno -2] Name or service not known'))

Could you please try the below from FortiSOAR CLI and verify:

# curl -v https://api.xforce.ibmcloud.com
# telnet api.xforce.ibmcloud.com 443
# ping api.xforce.ibmcloud.c

[Osama-Ahmed]

Dear jankit6,

Thanks for your replay,kindly find the commands output

1- ping

ping api.xforce.ibmcloud.com
PING e213697.dsca.akamaiedge.net (2.20.134.105) 56(84) bytes of data.
64 bytes from a2-20-134-105.deploy.static.akamaitechnologies.com (2.20.134.105): icmp_seq=1 ttl=49 time=83.3 ms
64 bytes from a2-20-134-105.deploy.static.akamaitechnologies.com (2.20.134.105): icmp_seq=2 ttl=49 time=81.8 ms

2- CURL

[root@fortisoar csadmin]# curl https://api.xforce.ibmcloud.com
Found. Redirecting to /doccurl -v https://api.xforce.ibmcloud.com://api.xforce.ibmcloud.com
* Uses proxy env variable no_proxy == '127.0.0.1,localhost'
* Trying 2.20.134.88:443...
* Connected to api.xforce.ibmcloud.com (2.20.134.88) port 443 (#0)
* ALPN, offering h2
* ALPN, offering http/1.1

but at the end i get this msg

onnection #0 to host api.xforce.ibmcloud.com left intact
Found. Redirecting to /doc[

[sharmah]

@Osama-Ahmed 
Could you please try the below from FortiSOAR CLI and verify:

curl -X GET --header 'Accept: application/json' -u {API_KEY:API_PASSWORD} 'https://api.xforce.ibmcloud.com/ipr/history/185.213.164.197'

Replace API_KEY and API_PASSWORD with your IBM xforce API key and password.

[Osama-Ahmed]

Dear sharmah,

kindly find the command output 

{"error":"Not authorized."}

[sharmah · Accepted solution]

It looks like you're encountering an authorization issue with the IBM X-Force API.

Please verify the following:

• Your API key and password are correct.

• You have the necessary permissions and an active subscription to access the API.

If the issue persists, I recommend raising a support ticket for further assistance.