Endpoint Standard Cloud: How to configure Local Mirror Server on Windows to use a proxy

Products

• Carbon Black Cloud Endpoint Standard (formerly Cb Defense)
• Carbon Black Cloud Enterprise EDR (formerly Cb Threathunter)

Issue/Introduction

Configure the Local Mirror server to utilize a proxy connection for signature updates.

Environment

• Endpoint Standard Local Mirror server: Version 2.2
• Microsoft Windows: All Supported Versions

Resolution

The following command parameters can be used when calling upd.exe either through a custom script or when using the do_update.bat file.

--no-dns-resolve
--proxy-host=<IP address of proxy>:<port>
--proxy-username
--proxy-password

Example of complete command to include in the do-update.bat file or a custom script (<values> are placeholders, replace with actual values)

upd.exe --mirror --no-config --update-modules-list=VDF,AVE2 --master-file=/idx/master.idx --product-file=/idx/savapi4lib-win32-en.info.gz --key-dir=. --install-dir=%outdir%\32 --internet-srvs=http://updates.cdc.carbonblack.io/update --no-dns-resolve --proxy-host=<IP address of proxy>:<port> --proxy-username=<user_name> --proxy-password=<password>

Additional Information

• These steps are only necessary if the host system settings are not configured to use a proxy or proxy authentication is required.
• Please back up the do_update.bat file prior to editing if updating an existing Local Mirror installation.
• Please keep in mind that if the script is stored in a clear text file the proxy authentication credentials will be stored in clear text.