Troubleshooting Cloud API Accessibility Errors

Troubleshooting Cloud API Accessibility Errors

Overview

Applications Manager monitors cloud resources by making API calls to the respective cloud provider endpoints (e.g., Azure Management APIs, AWS APIs). When these API endpoints are unreachable or blocked from the Applications Manager installed server, data collection fails with HTTP error codes such as 502 (Bad Gateway), 503 (Service Unavailable), 504 (Gateway Timeout), and other similar connectivity errors.
A sample error message may appear in Monitor's details page:
Authentication failed. Reason: Bad Gateway. (Error 502). Please verify that the API Endpoint is accessible and allowed via Proxy from Applications Manager installed server. Refer to the KB for troubleshooting.
This article provides troubleshooting instructions to identify and resolve cloud API accessibility issues from the Applications Manager installed server.

Troubleshooting Steps

Follow the steps below to identify and resolve the issue.

Step 1 - Check Endpoint Accessibility from the Applications Manager Installed Server

Open a web browser on the Applications Manager installed server and try accessing the cloud API endpoint directly. This is a reachability check to confirm whether the server can reach the endpoint.
For example, try opening the following URL in the browser:
                                                         
For the complete list of hosts and ports that need to be accessible, refer to:
Notes
Note: This step only checks whether the endpoint is reachable from the server. A successful response (even an authentication error or a JSON response) confirms that the endpoint is accessible - proceed to Step 2. If the browser returns a connection timeout, DNS resolution failure, or a proxy error, the endpoint is not reachable - proceed to Step 3.
Based on the result:
Result Action
Endpoint is accessible in the browser The endpoint is reachable from the server. The issue is likely related to proxy configuration in Applications Manager. → Proceed to Step 2.
Endpoint is NOT accessible in the browser The endpoint is not reachable from the server. → Proceed to Step 3.

Step 2 - Check Proxy Configuration in Applications Manager

  1. In Applications Manager, navigate to SettingsProxy Server Settings.
  2. Verify the following:
    • If a proxy is configured, ensure the proxy server address, port, and credentials (if applicable) are correct.
    • If a proxy is required to reach cloud endpoints, ensure the cloud API endpoints are not in the No Proxy list (bypass list), so that traffic is correctly routed through the proxy.
    • If the server accesses the internet without a proxy, ensure that no proxy is configured in Applications Manager. If a proxy is configured for other purposes but is not needed for cloud endpoints, add the cloud API endpoints to the No Proxy list - endpoints in this list bypass the proxy and connect directly.
  3. After verifying and updating the proxy settings, poll the monitor to check if data collection resumes.
Notes
Note: The browser and Applications Manager may use different proxy/network configurations on the same server. The browser typically uses system-level or browser-specific proxy settings, whereas Applications Manager uses its own proxy configuration. This difference is the most common cause of such errors. Confirm with your network or IT team whether a proxy is required to access external endpoints from the Applications Manager installed server.

Step 3 - Endpoint Not Accessible from the Applications Manager Installed Server

If the cloud API endpoint is not accessible from the browser on the Applications Manager installed server, one or more of the following may be the cause. Check each item below:
  1. Network Connectivity: Verify that the Applications Manager server has network connectivity to the internet or the required cloud endpoint.
    • Try running nslookup management.azure.com from the server to confirm the hostname resolves to an IP address. If the hostname resolves successfully, it confirms DNS is working and basic network path exists.
  2. Firewall or Network Policy: Check if a firewall rule, security group, or network policy is blocking outbound connections to the cloud API endpoint from the Applications Manager server.
    • Coordinate with your network or IT team to ensure the required hosts and ports are allowed. Refer to the host and port list in Step 1 above or the Additional References section.
  3. DNS Resolution: If nslookup fails to resolve the hostname, DNS resolution is not working correctly on the Applications Manager server.
    • Check the DNS server configuration on the server.
    • Verify with your network or IT team that the DNS server can resolve external hostnames.
  4. Proxy Requirement: If the endpoint is only accessible via a proxy, ensure the proxy is configured correctly in Applications Manager.
    • Refer to Step 2 above to verify and configure proxy settings.
Notes
Note: After making any network, firewall, DNS, or proxy changes, poll the monitor in Applications Manager to verify that data collection resumes successfully.

Still Facing Issues?

If the issue persists after completing the steps above, follow the steps below to capture diagnostic information and share it with support.

Step 1 - Enable Debug Logging

  1. In Applications Manager, enable the following logging options:
    1. Go to SettingsLoggingGeneral Logging → Select Print all logs.
    2. Go to SettingsPerformance PollingCloud tab → Enable Log API Responses. This captures the raw API response and helps identify the exact error returned by the cloud provider.

Step 2 - Poll the Monitor

  1. Navigate to the affected monitor's details page and click the Poll Now button to trigger a manual poll.
  2. Wait for data collection to complete fully before proceeding. Do not trigger another poll or restart the application during this time.

Step 3 - Generate the Support Information File (SIF)

  1. Once data collection is complete, generate and download the Support Information File (SIF) from Applications Manager:
    • Go to SettingsSupportCreate SIF.
    • The SIF bundles all relevant logs, configuration details, and API responses needed for analysis.

Step 4 - Share the Following

Share the following details with Applications Manager support:

  • A screenshot of the monitor page.
  • A screenshot of the browser accessibility check result from the Applications Manager installed server (from Step 1).
  • The proxy configuration details in Applications Manager (if proxy is configured).
  • The generated SIF file.

Additional References

For additional troubleshooting and reference, see the following articles:
Article Description
Microsoft Azure – Hosts and Ports Lists all hosts and ports accessed while monitoring Azure resources in Applications Manager.
Amazon – Hosts and Ports Lists all hosts and ports accessed while monitoring AWS resources in Applications Manager.
Troubleshooting Server Error Responses General troubleshooting guide for HTTP server error responses (5xx errors) encountered in Applications Manager.
Troubleshooting URL Monitors Troubleshooting steps for URL monitor connectivity and accessibility issues.

                  New to ADSelfService Plus?

                    • Related Articles

                    • REST API Monitor Troubleshooting Guide

                      Whether you're adding a new REST API monitor or troubleshooting an existing one, the following steps can help resolve common issues. Troubleshooting 4xx Error Codes (e.g., 401, 403) Check Request Configuration: Verify that the correct HTTP method ...
                    • Real User Monitor (RUM) - Troubleshooting guide

                      If the monitor has not polled data for a long time, follow the below steps for troubleshooting. Step 1: Check the RUM Agent configuration Real User Monitor requires the RUM Agent to be installed and mapped to the Applications Manager. Refer this help ...
                    • Troubleshooting errors in Exchange Online (PowerShell Mode)

                      Prerequisites: Ensure that you have met all the prerequisites for the Microsoft 365 monitor. From Applications Manager version 16300 onwards, Microsoft 365 monitor will use Microsoft Graph API as the primary mode of data collection. We have migrated ...
                    • Troubleshooting WinRM errors

                      This KB serves as a guide for troubleshooting errors when using the WinRM mode of data collection. First, ensure that all the following conditions are met: Refer to the below link and check if all the WinRM prerequisites have been completed properly ...
                    • Cloud Monitoring API Usage

                      How Cloud Monitoring Works? Cloud Monitoring involves collecting, analyzing, and visualizing performance metrics and telemetry data from cloud infrastructure and applications via APIs. Cloud Monitoring data collection flow: API Authentication: ...