NOTE: Proxy computers cannot download patches or updates through the Panda Patch Management module. Only computers with direct access to the Panda Security cloud or with indirect access through a corporate proxy can download patches.
Proxy computers can serve a variable number of devices, depending on the hardware resources installed. As a general rule, a proxy computer can serve a maximum of 100 computers.
Requirements for designating a computer as a proxy
- Windows operating system and Panda Adaptive Defense 360 product installed.
- Support for the 8.3 filename format. For more information on file name requirements, see this MSDN article.
- TCP port 3128 must not be in use by other applications.
- Port 3128 open for inbound and outbound connections.
- The proxy computer name must be resolved from the computer that uses it. For further information, see Internet connections through proxy in products based on Aether article.
Configuring a computer as a proxy server
- Click the Network settings tab. Select an existing Proxy and language settings profile or create a new one.
- Expand the Proxy section and select Adaptive Defense 360 proxy.
- Click Select computer...
- In the computer selection window, click Add proxy server. A list will be displayed with all managed computers that haven't been designated as proxy server yet.
- Select the computers that will act as a proxy server for all other workstations and servers protected by Adaptive Defense 360.
NOTE: For Linux, it is not possible to add more than one machine as proxy, therefore, there is no fallback mechanism in place.
- Click the Network settings tab. Select an existing Proxy and language settings profile or create a new one.
- Expand the Proxy section and select Adaptive Defense 360 proxy.
- Click Select
computer.. - Click the icon of the computer that you want to stop acting as a proxy.
When the agent cannot connect to the Aether platform despite having tried all the connection methods in the access list you configured, it traverses the fallback list from the start. This list cannot be edited by you. After the agent finds a connection method that works, it continues to use it until it fails, at which point the agent traverses the access list you configured from the start until it finds one that works. If none of the access methods in the access list or the fallback list works, the agent returns a communication error.
The fallback list is fixed and contains these access methods (not all access methods are available for all platforms):
- Internet Explorer: Adaptive Defense 360 tries to retrieve the Internet Explorer proxy settings by impersonating the user account that logged in to the computer. This method is only available for Windows operating systems.
- This method cannot be used if the proxy credentials have been explicitly defined.
- If the Internet Explorer proxy settings have been configured using a proxy auto-config (PAC) file, the solution will obtain the URL of the configuration file only if the protocol for accessing the resource is HTTP or HTTPS.
- Default proxy: Adaptive Defense 360 reads the operating system’s default proxy settings.
- WPAD: Adaptive Defense 360 uses DNS or DHCP to query the network and get the discovery URL that points to the proxy auto-configuration (PAC) file.
- Direct connection: Adaptive Defense 360 tries to connect directly to the Panda cloud.
Related Articles