topic Re: Harmony Endpoint connection to cloud console via authenticated Proxy in Endpoint

Harmony Endpoint connection to cloud console via authenticated Proxy

lrossi89 — Fri, 17 Feb 2023 13:53:06 GMT

Authenticated Proxy

If you have a proxy server to authenticate access to a resource:

Go to Policy > Client Settings > General > Authenticated Proxy.
Enter:
- Proxy - Proxy server address in the format address:host. For example, 192.168.79.157:3128
- Username - User name for the proxy server.
- Password - Password for the proxy server.
Click Save.

We have configured an authenticated proxy to bring out the endpoints (which are on an isolated network and cannot navigate and must not use the internet), but there is a need for the client to reach the endpoint console in the cloud.

We configured the features as per documentation above, but does not seem to work 😞

Is this functionality correctly supported?

Re: Harmony Endpoint connection to cloud console via authenticated Proxy

Chris_Atkinson — Fri, 17 Feb 2023 14:07:56 GMT

Which endpoint client version do you have deployed - E86.60 or higher?

EPS-34852 Enhancement: Endpoint Client now supports communication with the Endpoint Server through an authenticated proxy when the proxy username and password are received through policy.

Re: Harmony Endpoint connection to cloud console via authenticated Proxy

lrossi89 — Fri, 17 Feb 2023 14:05:53 GMT

Version: E87.10 (87.10.0213)

Re: Harmony Endpoint connection to cloud console via authenticated Proxy

Chris_Atkinson — Fri, 17 Feb 2023 14:10:04 GMT

It should be supported, if it doesn't appear to be working as expected on this version please open an SR with TAC to investigate further.

Re: Harmony Endpoint connection to cloud console via authenticated Proxy

Swiftyyyy — Fri, 17 Feb 2023 19:29:38 GMT

Is there any information regarding the authentication scheme supported by the agent itself?
If all the agent knows how to work with is "Basic" authentication, then I find it unlikely that a modern proxy would be configured to support that.

Re: Harmony Endpoint connection to cloud console via authenticated Proxy

lrossi89 — Mon, 20 Feb 2023 09:11:40 GMT

I am investigating with the TAC, but it seems that the client must rely on the Windows proxy (the ticket is not yet closed)
In parallel, could you ask internally if it really is so?

Re: Harmony Endpoint connection to cloud console via authenticated Proxy

Chris_Atkinson — Mon, 20 Feb 2023 11:55:49 GMT

We read the OS proxy settings, however:

If authentication is required we use the settings on that page in the UI including the proxy IP, the client itself cannot authenticate on behalf of a user hence the need to specify credentials / service account there.

Re: Harmony Endpoint connection to cloud console via authenticated Proxy

Chris_Atkinson — Mon, 20 Feb 2023 11:56:45 GMT

I'm checking the supported authentication methods and will advise.