Apply proxy configuration via group policies (GPO)
In many cases, the organization's connectivity goes through a proxy; it could be for security, performance, or other reasons. The proxy configuration in FlexxAgent can be done in two ways: using a group policy (GPO) or during the agent installation. To configure the proxy using a group policy, follow the procedure below:
-
Access the domain controller's group policy management console. Create a new policy using the
New
option from the menu that appears when you right-click onGroup Policy Objects
. -
Give the new policy an appropriate name and click the
OK
button. -
Select the policy with the right mouse button and edit it (option
Edit…
) -
In the editing window, expand
Computer Configuration
,Preferences
, andWindows Settings
. SelectRegistry
and thenNew
->Registry Item
. -
Add the following information and click
OK
.- Action: Update
- Key path:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Flexxible\FlexxAgent\Communications
- Value Name: Proxy_URL
- Value type: REG_SZ
- Value data: the proxy's address (URL) and port. For example
https://192.168.1.1:3128
.
-
In the right panel, add another registry entry with the right mouse button, selecting
New
->Registry Item
. -
Add the following information and click
OK
.- Action: Update
- Key path:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Flexxible\FlexxAgent\Communications
- Value Name: Proxy_User
- Value type: REG_SZ
- Value data: the username to authenticate to the proxy server. For example
Admin
.
-
In the right panel, add another registry entry with the right mouse button, selecting
New
->Registry Item
. -
Add the following information and click
OK
.- Action: Update
- Key path:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Flexxible\FlexxAgent\Communications
- Value Name: Proxy_Pwd
- Value type: REG_SZ
- Value data: the password to authenticate to the proxy server, corresponding to the user configured in the previous step.
- The value of the
Proxy_Pwd
key can be filled in plain text (not recommended) or base64 encoded by putting the string “&&&” before and after. Example:&&&VGhpc0lzTjArQCQzY3VyZVBAJCR3MHJk&&&
. - In any case, FlexxAgent encrypts the value of this field at startup.
- To encode the password in base64, you can use some web service, such as https://www.base64encode.org/.
- The value of the
-
Three registry entries will have been created in the group policy.
- Close the editor.
- With the right mouse button, select the list of devices that will receive this configuration within the domain controller (under the domain or organizational unit) and select
Link an Existing GPO
.
- Select the group policy created earlier.
- The policy is linked to the selected devices in the domain controller.
- Optional step: if you want to check on a device that the group policy has been applied correctly, you need to restart the device. Once started, you can go to the registry editor and check that the entries have been created correctly.