Configure the Engine to Use a Web Proxy - Administrator Guide - 8 - Cortex XSOAR - Cortex - Security Operations

Cortex XSOAR Administrator Guide
Product
Cortex XSOAR
Version
8
Creation date
2024-02-14
Last date published
2024-04-21
Category
Administrator Guide
Solution
Cloud
Abstract

Configure a Cortex XSOAR engine to use a web proxy by editing the d1.conf file.

Proxy settings can be configured in an engine, by adding them as an engine configuration.

Note

You need to configure Docker to use a proxy. When using a BlueCoat proxy, ensure you encode the values correctly.

  1. In the d1.conf file, add the following keys.

    Key

    Value

    Description

    http_proxy

    http://<user:password@proxy-server:port#>

    For example http://user:password@proxy-server:3128

    Environment uses http proxy. Special characters must be escaped.

    https_proxy

    https://user:password@proxy-server:port#

    For example, https://user:password@proxy-server:3128

    Environment uses https proxy. Special characters must be escaped.

    host.proxy

    true

    Multi-tenant host proxy: Host uses proxy to connect to the main account.

    accounts.http.proxy

    false

    Multi-tenant accounts http proxy: Prevents communication from the main account to tenants from going through proxy.

    accounts.http.websocket.proxy

    false

    Multi-tenant accounts http websocket proxy: Prevents main account from using proxy for websockets forwarding to tenants.

  2. If the environment variables are not set, or you wish to use a different settings than those specified in the environment variables, set the configuration with your specific proxy details in the d1.conf file. For example:

    {"http_proxy": "http://proxy.host.local:8080",
"https_proxy": "https://proxy.host.local:8443"}

  3. Save the file.