Skip to main content

Apply proxy configuration via group policies (GPO)

In many cases, the organization's connectivity goes through a proxy; it could be for security, performance, or other reasons. The proxy configuration in FlexxAgent can be done in two ways: using a group policy (GPO) or during the agent installation. To configure the proxy using a group policy, follow the procedure below:

  1. Access the domain controller's group policy management console. Create a new policy using the New option from the menu that appears when you right-click on Group Policy Objects.

    0gpodeploy

  2. Give the new policy an appropriate name and click the OK button.

  3. Select the policy with the right mouse button and edit it (option Edit…)

  4. In the editing window, expand Computer Configuration, Preferences, and Windows Settings. Select Registry and then New -> Registry Item.

    1gpodeploy

  5. Add the following information and click OK.

    • Action: Update
    • Key path: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Flexxible\FlexxAgent\Communications
    • Value Name: Proxy_URL
    • Value type: REG_SZ
    • Value data: the proxy's address (URL) and port. For example https://192.168.1.1:3128.

    2gpodeploy

  6. In the right panel, add another registry entry with the right mouse button, selecting New -> Registry Item.

    3gpodeploy

  7. Add the following information and click OK.

    • Action: Update
    • Key path: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Flexxible\FlexxAgent\Communications
    • Value Name: Proxy_User
    • Value type: REG_SZ
    • Value data: the username to authenticate to the proxy server. For example Admin.

  8. In the right panel, add another registry entry with the right mouse button, selecting New -> Registry Item.

  9. Add the following information and click OK.

    • Action: Update
    • Key path: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Flexxible\FlexxAgent\Communications
    • Value Name: Proxy_Pwd
    • Value type: REG_SZ
    • Value data: the password to authenticate to the proxy server, corresponding to the user configured in the previous step.
      • The value of the Proxy_Pwd key can be filled in plain text (not recommended) or base64 encoded by putting the string “&&&” before and after. Example: &&&VGhpc0lzTjArQCQzY3VyZVBAJCR3MHJk&&&.
      • In any case, FlexxAgent encrypts the value of this field at startup.
      • To encode the password in base64, you can use some web service, such as https://www.base64encode.org/.

  10. Three registry entries will have been created in the group policy.

4gpodeploy

  1. Close the editor.
  2. With the right mouse button, select the list of devices that will receive this configuration within the domain controller (under the domain or organizational unit) and select Link an Existing GPO.

5gpodeploy

  1. Select the group policy created earlier.
  2. The policy is linked to the selected devices in the domain controller.

6gpodeploy

  1. Optional step: if you want to check on a device that the group policy has been applied correctly, you need to restart the device. Once started, you can go to the registry editor and check that the entries have been created correctly.

7gpodeploy