-
Título
How to configure the Hybrid agent behind a proxy server? -
Descrição
What are the considerations and connectivity requirements when installing the On Demand Hybrid agent behind a proxy server? -
Causa
The Hybrid agent connection will use the proxy server settings applied to the service account or the computer where it is installed -
Resolução
To ensure the Hybrid agent will connect to On Demand behind a proxy server, it will be required to configure the Internet Explorer Proxy for at least the user identity running the setup and the service account used to run the Agent service. This can be configured via Proxy Settings in the Control Panel or via Internet Explorer settings (both control the same settings):
https://learn.microsoft.com/en-us/windows/deployment/do/delivery-optimization-proxy
Because you can configure the IE proxy settings scope "per machine" or "per user", it is important to note that if the user installing the agent (running the agentSetup.exe), and the user that is supplied to run the service are different, you must configure the IE Proxy for both of them (the setting is per-user). Otherwise, you could have the installation complete but the service won't connect or start. Regardless of which scope is used, it also involves a registry entry that can be browsed in the following path:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
Depending on the value set in the DWORD 32-bit entry called "ProxySettingsPerUser", it will tell you the scope level. If the value is "0" it is set to "per machine", and if the value is "1" it is set to "per user".
It is recommended to set the proxy settings scope to "machine-wide" for simplification, especially if you use services that run as the "Local System" account such as the Change Auditor coordinator to handle this better when integrating with On Demand Audit. These are the steps to set up a proxy "machine-wide":1. Configure the Internet Explorer Proxy Settings for the signed-in user.
2. Export the following registry key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\
3. Edit the exported file above. Replace HKEY_CURRENT_USER with HKEY_LOCAL_MACHINE
4. Import the file
5. Browse to the following registry key:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings
6. Add a new dword 32-bit entry - Name: ProxySettingsPerUser Value: 0 (this configures the machine to use the machine-wide proxy settings.
7. Reboot the host.
