> For the complete documentation index, see [llms.txt](https://cortex-docs.paloaltonetworks.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-transporter.md).

# Activate Transporter

{% hint style="info" %}
Requires the Cortex Cloud Posture Management or Cortex Cloud Runtime Security add-on.<br>
{% endhint %}

The Transporter over Broker VM enables secure communication between Cortex Cloud and your self-hosted integrations such as [Version Control Systems (VCS)](/application-security/application-security/onboard-data-sources/onboard-version-control-systems.md) and [SonarQube Server](/application-security/application-security/onboard-data-sources/ingest-third-party-data-sources/sonarqube.md) without exposing your internal network to the cloud.

Whether you need a Transporter depends on your domain's accessibility. A direct connection to a private domain fails because Cortex Cloud cannot reach the on-premises host.

* **Private domains**: A Transporter is required. Because Cortex Cloud cannot directly reach on-premises hosts, a direct connection to a private domain will fail. The Transporter bridges this connection securely without exposing your internal network
* **Public domains**: A Transporter is not needed

For domain-specific requirements and configuration steps, refer to the onboarding guide specific to your particular integration.

## Prerequisites

* Permissions: To configure and manage Transporter applet settings, you must have permissions to manage Broker Service configurations (such as an Instance Administrator)
* [Set up and configure Broker VM](/cortex-cloud-posture-management/data-management/broker-vm/set-up-and-configure-broker-vm.md)
* Confirm that your Broker is v 28 or above
* Whitelist IP addresses to enable access to Cortex XSIAM resources. The IP addresses for the Transporter are in the Broker VM Resources section of the [Enable access to required PANW resources](/cortex-cloud-posture-management/onboard-and-configure/deployment-steps-and-checklist/activate-cortex-cloud/enable-access-to-required-panw-resources.md) document
* Open port `4052`, which is required for the Transporter's IP address communication
* Open Port `443` (outbound), which is required for the Broker VM to pull data from your version control system (VCS)

**License**

To gain access to and use the Transporter applet, you must possess one of these license types: Cloud Posture Security or Runtime Management) or XSIAM Premium. If you plan to use the Transporter for Code Security scanning, you will also need the Code Security add-on license.

{% hint style="warning" %}
The Transporter applet is not supported for FedRAMP customers.
{% endhint %}

## How to activate the Transporter applet

1. Select Settings → Configurations → Broker VMs (under Data Broker.
2. Select the Brokers tab → locate your Broker VM → hover and click + Add under the Apps column → AppSec Transporter.
3. Configure the Transporter connection in the provided fields:

* Transporter Name (required). Requires a unique name as you can integrate multiple applets for different integrations
* Provider Self Signed CA Certificate Path: Specify the file path for a custom Certificate Authority (CA) certificate used by the Transporter to securely communicate with services

4. Click **Save**.
5. Verify connectivity: Navigate to the Apps column and verify that your AppSec Transporter applet has been added and displays a connected status.
6. **Next step**: After activating the Transporter, proceed to configure the Transporter applet on your self-managed VCS data source instance. For more information, refer to [Set up a Transporter on your VCS](/application-security/application-security/onboard-data-sources/transporter-over-broker-vm/set-up-a-transporter-on-your-vcs.md).

## Manage Transporter applets

To manage Transporter applet configurations, disable connections, or deactivate an applet, navigate to the Broker VMs page. From there, select your Appsec Transporter under the App column.

* **Edit applet configurations**: Select the Appsec Transporter under the App column → Configure. You are redirected to the Transporter applet settings to manage its configurations
* **Disable applet connection for a single integration**:
  1. Select the Appsec Transporter under the App column → Configure.
  2. On the Transporter applet configurations page, click on the specific Transporter applet → Disable. This disables the specific integration, but it can be re-enabled.
* **Deactivate an applet** (all connections): Select the Appsec Transporter under the App column → Deactivate → Confirm when prompted All existing connections are deleted but their configurations are saved in the database. When adding a new connection, you'll be prompted if you want to reuse previous configurations.


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://cortex-docs.paloaltonetworks.com/cortex-cloud-posture-management/cortex-cloud-data-sources-and-connectors/generic-on-premise-data-collectors/broker-vm-data-collector-applets/activate-transporter.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.