4.1.4. Proxy Configuration

OPSWAT Central Management can be configured to send its traffic through a forward proxy. Administrators can configure proxy settings in the Proxy tab at Settings > Server Configuration.

images/download/attachments/4938899/image2020-5-20_14-59-13.png

  • Enable proxy: Enable the use of proxy

  • Use the system/external proxy: Swap between using the system proxy settings available on the machine or the proxy settings configured only for OPSWAT Central Management.

  • External proxy only:

    • different settings/same settings: Determine if each protocol should have their own proxy server settings or if they should share the same settings.

    • Username, Password: The credentials to access the proxy server. Optional if the server does not require credentials.

    • Proxy Address, Port: The address of the proxy server.

    • Bypass Proxy Server: The bypass list includes the domain that should be accessed directly and not via proxy.

OPSWAT Central Management currently only supports the basic authorization scheme for proxy credentials.

Supported bypass list format:

  • IP range (CIDR notation).
    For example: 192.168.203.1/16.
    Note: The broadcast and network addresses are not included in the bypass list.

  • Valid IP address or host name. Wildcard character * is supported as prefix and/or suffix.
    For example: 192.168.*;*.opswat.*

Note: Each entry should be separated by the semi-colon character ';'.

System proxy settings

In the setup wizard after a fresh installation, OPSWAT Central Management will attempt to locate the current system proxy settings and bypass list:

  • On Windows, via the netsh winhttp command.

  • On Ubuntu, via the environment variables http_proxy, https_proxy and no_proxy set in the EnvironmentFile configuration for OPSWAT Central Management's service file (/var/lib/ocm/ocm.service).

  • On Red Hat Enterprise Linux, via the environment variables http_proxy, https_proxy and no_proxy set in /etc/bashrc.

    The environment variable http_proxy will be used for both http and https protocols, if its counterpart https_proxy is not detected.

The system proxy settings will be saved to OPSWAT Central Management's proxy configuration.

OPSWAT Central Management requires a restart to adopt newly changed system settings.

The supported format for proxy server is <host>:<port>, for example, proxy.test.com:1111.
Please use OPSWAT Central Management's external proxy settings on the console if your system proxy server does not fit this format.