Harmony Endpoint connection to cloud console via authenticated Proxy

[lrossi89]

Harmony Endpoint Administration Guide

Authenticated Proxy

If you have a proxy server to authenticate access to a resource:

1. Go to Policy > Client Settings > General > Authenticated Proxy.

2. Enter:

   • Proxy - Proxy server address in the format address:host. For example, 192.168.79.157:3128

   • Username - User name for the proxy server.

   • Password - Password for the proxy server.

3. Click Save.

We have configured an authenticated proxy to bring out the endpoints (which are on an isolated network and cannot navigate and must not use the internet), but there is a need for the client to reach the endpoint console in the cloud.

We configured the features as per documentation above, but does not seem to work 😞

Is this functionality correctly supported?

[Chris_Atkinson]

Which endpoint client version do you have deployed - E86.60 or higher?

EPS-34852 Enhancement: Endpoint Client now supports communication with the Endpoint Server through an authenticated proxy when the proxy username and password are received through policy.

[lrossi89]

Version: E87.10 (87.10.0213)

[Chris_Atkinson]

It should be supported, if it doesn't appear to be working as expected on this version please open an SR with TAC to investigate further. 

[Swiftyyyy]

Is there any information regarding the authentication scheme supported by the agent itself?
If all the agent knows how to work with is "Basic" authentication, then I find it unlikely that a modern proxy would be configured to support that.

[Chris_Atkinson]

I'm checking the supported authentication methods and will advise.

[lrossi89]

I am investigating with the TAC, but it seems that the client must rely on the Windows proxy (the ticket is not yet closed)
In parallel, could you ask internally if it really is so?

[Chris_Atkinson]

We read the OS proxy settings, however:

If authentication is required we use the settings on that page in the UI including the proxy IP, the client itself cannot authenticate on behalf of a user hence the need to specify credentials / service account there.