Dell Endpoint Security Suite Enterprise and Threat Defense Proxy Settings

Affected Products:

• Dell Endpoint Security Suite Enterprise
• Dell Threat Defense

Affected Versions:

• Windows - Agent 1290 or higher
• macOS - Agent 1300 or higher
• Linux - Agent 1430 or higher

Table of Contents

• Windows
• macOS
• Linux

Dell Endpoint Security Suite Enterprise and Threat Defense support proxy configurations for users is configured through a registry entry. When a proxy is configured, the agent uses the IP address and port for all outbound communication to Cylance hosts.

Not Applicable

Windows

To configure the proxy in Dell Endpoint Security Suite Enterprise and Threat Defense:

1. Access the registry. Depending on how your agent was installed (Protected Mode that is enabled or not), you must elevate your privileges or take ownership of the registry.
2. Download psexe.exe from the Microsoft website, https://docs.microsoft.com/en-us/sysinternals/downloads/psexec .
3. Open a DOS prompt as Administrator.
4. Run this command first:
   1. psexec -i -s cmd.exe.

Figure 1: (English Only) Agree to License Terms

2. Accept the EULA then run this command inside the new windows opened by psexec: regedt32.exe:

Figure 2: (English Only) Type regedt32.exe

5. In the Registry Editor, go to HKEY_LOCAL_MACHINE\SOFTWARE\Cylance\Desktop
6. Create a String Value (REG_SZ):
   • Value Name = ProxyServer
   • Value Data = your Proxy settings.

Figure 3: (English Only) Registry Editor

Back To Top

macOS

To configure the proxy in Dell Endpoint Security Suite Enterprise and Threat Defense:

Modify the values.xml file in the Cylance folder:

Option 1: To use the command line:

1. Access the values.xml file. The default location is

/Library/Application Support/Cylance/Desktop/registry/LocalMachine/Software/Cylance/Desktop/values.xml

Figure 4: (English Only) Open values.xml

2. Edit the values.xml file and add the following between the <values> element:
   • <value name="ProxyServer" type="string">PROXY IP AND PORT HERE</value>
   • Example: <value name="ProxyServer" type="string">127.0.0.1:8080</value>

Figure 5: (English Only) Edit values.xml

Type CTRL + X and Y to save the file.

The protection status should be green:

Figure 6: (English Only) Advanced Threat Prevention

Option 2: To use a bash script:

Use a bash script to push the proxy key down to OS X / macOS devices in your organization that require a proxy for outbound communications to Cylance hosts.

1. Create a file (CylanceMacProxy.sh) with the following contents:

#!/usr/bin/bash
ADDR=1.2.3.4:8080
FILE="/Library/Application Support/Cylance/Desktop/registry/LocalMachine/Software/Cylance/Desktop/values.xml"
sed -i '' 's/.*<values>.*/&\
<value name="ProxyServer" type="string">'$ADDR'<\/value>/' "$FILE"

Where:

ADDR represents the Proxy Server IP address and port.

2. Use your preferred deployment mechanism (Casper, so forth) to run the bash script using sudo.

sudo bash ./CylanceMacProxy.sh

Back To Top

Linux

To configure the proxy in Dell Endpoint Security Suite Enterprise in Linux, choose the appropriate Operating System:

echo "env http_proxy=http://proxyaddress:port" /etc/init/cylancesvc.override && systemctl stop cylancesvc && systemctl daemon-reload && systemctl start cylancesvc

echo "env https_proxy=https://proxyaddress:port" /etc/init/cylancesvc.override && systemctl stop cylancesvc && systemctl daemon-reload && systemctl start cylancesvc

Back To Top

To contact support, reference Dell Data Security International Support Phone Numbers.
Go to TechDirect to generate a technical support request online.
For additional insights and resources, join the Dell Security Community Forum.