Carbon Black Cloud: How to Set a Proxy for Linux Sensor Post Install

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

To set a proxy for a linux sensor post installation

Environment

• Carbon Black Cloud Sensor: 2.11.1 and higher
• Linux: All Supported Versions

Resolution

1. Create a separate configuration directory /etc/systemd/system/cbagentd.service.d
2. Create a file /etc/systemd/system/cbagentd.service.d/custom.conf with the following contents:

   [Service]
   EnvironmentFile=/etc/environment

3. Add the following contents to /etc/environment:

   all_proxy=<ip_address_of_proxy>:<port number> or
   https_proxy=<ip_address_of_proxy>:<port number>
   
   Note that you can use the FQDN if the hostname is used instead of the IP address.

4. After making configuration changes, the sensor must be restarted; for example:

   'systemctl
   daemon-reload'; systemctl restart cbagentd

Additional Information

• Proxy environment variables are not supported in CentOS 6
• This will set a proxy at the system level. To set a proxy for only the sensor:
  1. Point custom.conf file a custom file location (instead of /etc/environment)
  2. Add the contents of step 3, to the custom file.