Configuring Runtime Proxy policies

Procedure

1. In the Trend Vision One console, go to Endpoint Security → Endpoint Inventory
2. Click the Default and Global Settings icon () and then click Global settings.
3. Go to the Runtime Proxy Settings tab.
4. Click Add Policy to create a new policy, or click a policy name to edit.
   The Runtime Proxy Policy Settings window appears.
5. Configure the General Settings.
   1. Specify the Policy name.
   2. To select the target endpoint groups, click the edit icon ().
   3. In the window that appears, select one or more endpoint groups to target.
      Selecting a parent group automatically selects all child groups, and includes any child groups added later. You can clear the selection for specific child groups you do not want included in the policy. You can select a child group even if the parent group is already targeted by another policy.

      Important Endpoint groups which are not assigned to a policy apply the Base Policy.

   4. Click Select.
6. To add a priority, click the add icon ().
   The Runtime Proxy Policy Settings window displays each priority as a tab in order of priority from left to right with the Default tab always on the right. New priorities are always added as the highest priority. You can rearrange priorities by clicking and dragging. You can delete a priority by clicking the remove icon (). You cannot delete the Default tab.
7. Set the priority criteria.

   Criteria type	Description	Input method
   All	The priority rule applies to all endpoints in the selected endpoint groups The Default priority is set to All and cannot be changed.	No input method, the rule applies to all endpoints.
   Operating system	The priority rule applies to any endpoint with the specified operating system	Click the edit icon () to select the OS family or a specific OS version.
   Endpoint name	The priority rule applies to any endpoint containing at least one specified value in the endpoint name For example, if you specify Test, the priority rule applies to the endpoint Test01.	Specify a value and either type a comma (,) or press ENTER to separate values.
   IP range	The priority rule applies to any endpoint with an IP address within one of the specified ranges	Specify an IP range in either IPv4 or IPv6 format. Click the add icon () to add up to 3 IP ranges.

   Important Some criteria options are not available in all regions. Endpoints must connect to Trend Vision One to receive the proxy information. If you choose to use the IP range criteria and a targeted endpoint IP Address changes, make sure the endpoint can access Trend Vision One with the new IP address. For example, if you move an endpoint to a new location, causing the IP address to change, the endpoint must connect to Trend Vision One to retrieve the proxy settings for the new location.

8. Specify the Service Gateway policy.

   Important You must have at least one Service Gateway with Forward Proxy Service enabled to connect using this method.

   • Click Use selected Service Gateways to specify which Service Gateway appliances to connect
     After selecting this option, a drop-down appears. Select one or more Service Gateway appliances. Hover over the info icon () to view the associated IPv4 address and enabled services.
   • Click Use all available Service Gateways to allow the endpoint agent to connect to any Service Gateway based on availability
   • Do not select anything and leave the settings blank if you do not want the targeted endpoints to connect to a Service Gateway appliance
9. Specify the Primary Custom Proxy Settings.
   Leave the settings blank if you do not want the targeted endpoints to use a proxy server to connect to Trend Vision One.

   • Proxy address: The IPv4 address or FQDN of the proxy server
   • Port: The connection port for the proxy server
   • If the proxy server requires credentials, select Require authentication credentials, and provide the Account and Password.
10. Specify the Default System Proxy Settings.

    Important Linux agents do not support using the default system proxy. Server & Workload Protection agents do not support connecting with a default system proxy that requires authentication credentials.

    • If your endpoint system proxy requires authentication credentials, select Require authentication credentials, and provide the Account and Password.
    • Otherwise, leave blank.
11. After you have configured your priority settings, click Save.
    The policy appears on the Runtime Proxy Settings list. Target endpoints apply the proxy settings the next time they connect with Trend Vision One.