App Control: WinHTTP Proxy Blocking Agent Communications

[#1]

Environment

• App Control Agent: All Supported Versions
• Microsoft Windows: All Supported Versions

Symptoms

• Agents are unable to communicate and register with the App Control server
• Dascli status shows: "Connection: Disconnected (Security Error)"
• Error messages in the Trace.bt9 log like this: 

  00:00:44 723834337 (17BC) - Server Communication: WinHTTP communication error: 12002

• Console errors are similar to:

  DownloadError[WinHttpSendRequest Error[12002:]]

Cause

WinHTTP Proxy is not set properly

Resolution

1. Open a command prompt with administrative rights
2. Run: 

   netsh winhttp show proxy

3. If a proxy exists, ensure proxy is set from the command line as:

   netsh winhttp set proxy proxy-server="<proxyservername>" bypass-list=<cbprotectionservername>;<Existing Bypass Lists>

4. A reboot may be required to restore the connection

Additional Notes

NOTE: Certain proxies may also require the App Control Server ports 41002 + 443 added to the server name > e.g: AppControlServerNameHere.local:41002 AppControlServerNameHere.local:443 (Replace AppControlServerNameHere with the actual name of your App Control Server)