Sensor Unauthenticated Web Proxy Configuration

Products

• Carbon Black EDR (formerly Cb Response)

Issue/Introduction

Configure the sensor to submit data through an unauthenticated proxy server.

Environment

• Carbon Black EDR Sensor: All Versions
• Linux: All Versions
• Windows: All Versions

Resolution

1. Configure Proxy parameter prior to sensor install
   • Add the following parameter in the sensorsettings.ini file:

     • Proxy=[host]:[port]
       
       Example:
       
       Proxy=192.168.1.254:8443

2. Configure Proxy parameter after sensor install:
   • Linux Endpoints:
     1. Edit /var/lib/cb/sensorsettings.ini
     2. Add Proxy parameter
     3. Restart cbdaemon
   • Windows Endpoints:
     1. Open the Registry Editor
     2. Locate the following Key: HKEY_LOCAL_MACHINE\SOFTWARE\CarbonBlack\config
     3. Add a String Value named "Proxy" with the proxy address in "Value data:"