Views:

Configure custom proxy policies for more granular control over how endpoints connect to Trend Vision One.

Important
Important
This is a "Pre-release" sub-feature and is not considered an official release. Please review the Pre-release sub-feature disclaimer before using the feature.
This feature is not available in all regions.
Runtime Proxy Settings only supports sensor-only, Standard Endpoint Protection, and Server & Workload Protection agents deployed using the agent installer downloaded from Endpoint Inventory.
You must update the agent to use this feature. Runtime Proxy Settings supports the following versions:
  • Standard Endpoint Protection (Windows) version 14.0.13139 or later
  • Server and Workload Protection (Windows/Linux ) version 20.0.1.9400 or later
  • Trend Vision One Endpoint agent May 2024 release or later
The Runtime Proxy Settings tab allows you to view and configure custom proxy policies for your managed agents. Click the Add Policy button to create a new policy, or click a policy name to edit an existing policy. For more information, see Configuring Runtime Proxy policies
Runtime Proxy Settings allows you to create and manage your proxy settings with greater control and specificity. An individual policy can be applied across multiple groups, as well as having different policies apply to sub-groups within a parent group.
The following table describes the information presented on the Runtime Proxy Settings list.
Column
Description
Policy name
Your proxy policies listed in order of creation
The policy list displays the newest policy first. Click a name to edit the policy.
Important
Important
Endpoint groups not assigned to a policy apply the Base Policy
Currently, sensor-only and connected endpoint protection agents can only apply the Sensor Policy.
Trend Micro recommends configuring the Base Policy and Sensor Policy before adding any new proxy policies.
Endpoint group
Lists the security deployments, Protection Managers, and endpoint groups the policy applies to
Endpoint groups can only be the target of one policy at a time, but sub-groups can be a target of a different policy than the parent group they belong to.
Priority
Lists the priority rules set in each policy
A policy can have up to five priority rules, including the default priority. Default is always the lowest priority within a policy.
Criteria
Lists the criteria of each priority within a policy
Hover over the number next to the criteria to see a list of the criteria values. For example, if the criteria is "endpoint name" hovering over the number shows a list of the specified values the policy uses to match endpoints to apply that priority.
Proxy settings
Lists the proxy settings in order of priority
Proxy policies always follows the priority of:
  • Service Gateways with Forward Proxy Service enabled, if configured
    The list displays the specified Service Gateways configured by the policy, or "All Service Gateways" if configured to use any available Service Gateway
    Note
    Note
    Endpoint agents can utilize the following services when enabled on the Service Gateway:
    • General Cache Service: When enabled, the endpoint agent uses the Service Gateway to download agent update packages.
    • ActiveUpdate Service: When enabled, the endpoint agent uses the Service Gateway to download pattern updates.
  • Primary Custom Proxy, if configured
    The list displays the proxy and port in the format of IP address:Port or FQDN:Port
  • System proxy
    Agents always default to the system proxy if unable to connect to a Service Gateway or the Primary Custom Proxy.