Unable to read data from the transport connection : An existing connection was forcibly closed by the remote host
Issue Description
UiPath robots are experiencing connection issues with Cloud Orchestrator due to restrictions imposed by Palo Alto firewall settings.
Error Code:
"Unable to read data from the transport connection: The remote host forcibly closed an existing connection. Error loading discovery document: Failed to connect to https://cloud.uipath.com/identity_/well-known/openid-configuration. The SSL connection could not be established. See inner exception for details."
Root Cause
The issue occurs because Palo Alto changed the category of cloud.uipath.com from Information Security to Artificial Intelligence, which may have triggered security restrictions on the customer’s network.
Categorization can be validated using Palo Alto URL Filtering.
Next Steps to Troubleshoot
- Verify Whitelisting:
Ensure that uipath.com and its subdomains are not blocked at the client side or by the client’s network provider.
- Test URL Accessibility:
- Ask the Internal IT team to open the URL in the error message (e.g., https://cloud.uipath.com/identity_/well-known/openid-configuratlon) in a browser and share the outcome.
- Confirm if cloud.uipath.com is accessible via the browser.
- Network Connectivity Check:
- Check if the team is able to access other websites.
- Determine if your team is using a Palo Alto firewall or is under a network that applies Palo Alto security policies.
Resolution
- If the Palo Alto firewall is in use, request the network team to review the category change and whitelist
cloud.uipath.com. - If the category cannot be changed, request an exemption for UiPath URLs to ensure seamless connectivity.
- If the issue persists, check firewall logs to identify blocked requests and adjust settings accordingly.