Cb Defense: Does the sensor support proxy server authentication?

By aglasco posted Jun 27, 2017 07:04 PM

Recommend

Environment

Cb Defense Sensor: All Versions
Microsoft Windows: All Supported Versions
Apple macOS: All Supported Versions

Question

Does the Cb Defense sensor support proxy server authentication?

Answer

Yes, proxy server authentication is supported. Typically end users will not be required to enter their credentials for proxy authentication because the sensor will attempt to auto-detect the pre-existing proxy server and proxy credential configuration from the local system operating system (when applicable). However, this should be tested prior to sensor deployment.

Additional Notes

If the automatic proxy detection doesn’t succeed, first specify server and port with the following command (authentication can be added as needed)

(Windows Sensor): PROXY_SERVER=<server>:<port>, PROXY_USER=<username>, and PROXY_PASSWD=<password>

or

(MAC Sensor): -p <server>:<port> -x <username>:<password>

Optionally, also specify the following option

LAST_ATTEMPT_PROXY_SERVER=<server>:<port>

Using this option, the sensor will attempt cloud access using this setting when all other methods fail (including dynamic proxy detection). See https://community.carbonblack.com/t5/Knowledge-Base/Cb-Defense-How-to-Perform-an-Unattended-Installation-of-the/ta-p/51003 for more details on the above options.
Replace <server>:<port> , <username>, <password> with the actual server/IP and port of the proxy server as well as the actual username and password required by the proxy server for authentication. Example:

PROXY_SERVER=10.10.10.1:8000 PROXY_USER=user01 PROXY_PASSWD=P*ssw0rd

To bypass the network proxy or firewall completely, configure the proxy server or firewall to allow outgoing connections from the sensor to the Cb Defense PSC Console. See https://community.carbonblack.com/t5/Knowledge-Base/Cb-Defense-What-s-the-static-IP-address-or-hostname-used-by-Cb/ta-p/42360 for more details.

Blog Viewer