Configuring Runtime Proxy policies

Procedure

1. In the Trend Vision One console, go to Endpoint Security → Endpoint Inventory
2. Click the Default and Global Settings icon () and then click Global settings.
3. Go to the Runtime Proxy Settings tab.
4. Click Add Policy to create a new policy, or click a policy name to edit.
   The Runtime Proxy Policy Settings window appears.
5. Configure the General Settings.
   1. Specify the Policy name.
   2. To select the target endpoint groups, click the edit icon ().
   3. In the window that appears, select one or more endpoint groups to target.
      Selecting a parent group automatically selects all child groups, and includes any child groups added later. You can clear the selection for specific child groups you do not want included in the policy. You can select a child group even if the parent group is already targeted by another policy.

      Important Endpoint groups which are not assigned to a policy apply the Base Policy.

   4. Click Select.
6. To add a priority, click the add icon ().
   The Runtime Proxy Policy Settings window displays each priority as a tab in order of priority from left to right with the Default tab always on the right. New priorities are always added as the highest priority. You can rearrange priorities by clicking and dragging. You can delete a priority by clicking the remove icon (). You cannot delete the Default tab.
7. Set the priority criteria.
   • All: Target all endpoints
     The Default priority is set to All and cannot be changed.
   • Operating system: Target endpoints by operating system type
     After selecting this type, a drop-down appears. Select one or more operating system types to apply the criteria to.
   • Endpoint name: Target endpoints by name
     After selecting this type, a text box appears. Specify a value and type a comma (,) or press ENTER to separate values.
     You do not have to specify a specific endpoint name. The policy is applied to any endpoints with a name that contains at least one of the specified values.
     For example, an endpoint with the name sarah-mac5-US-sales can be targeted by the tags mac5, US-sales, or sarah.
8. Specify the Service Gateway policy.

   Important You must have at least one Service Gateway with Forward Proxy Service enabled to connect using this method.

   • Click Use selected Service Gateways to specify which Service Gateway appliances to connect
     After selecting this option, a drop-down appears. Select one or more Service Gateway appliances. Hover over the info icon () to view the associated IPv4 address and enabled services.
   • Click Use all available Service Gateways to allow the endpoint agent to connect to any Service Gateway based on availability
   • Do not select anything and leave the settings blank if you do not want the targeted endpoints to connect to a Service Gateway appliance
9. Specify the Primary Custom Proxy Settings.
   Leave the settings blank if you do not want the targeted endpoints to use a proxy server to connect to Trend Vision One.

   • Proxy address: The IPv4 address or FQDN of the proxy server
   • Port: The connection port for the proxy server
   • If the proxy server requires credentials, select Require authentication credentials, and provide the Account and Password.
10. Specify the Default System Proxy Settings.

    Important Linux agents do not support using the default system proxy. Server & Workload Protection agents do not support connecting with a default system proxy that requires authentication credentials.

    • If your endpoint system proxy requires authentication credentials, select Require authentication credentials, and provide the Account and Password.
    • Otherwise, leave blank.
11. After you have configured your priority settings, click Save.
    The policy appears on the Runtime Proxy Settings list. Target endpoints apply the proxy settings the next time they connect with Trend Vision One.