Kaspersky Embedded Systems Security for Linux

Configuring a proxy server

You can configure proxy server settings if the users of the client devices use a proxy server to connect to the internet. The Kaspersky Embedded Systems Security application can use a proxy server to connect to Kaspersky activation servers, to update sources for databases and application modules, to Kaspersky Security Network, and when verifying website certificates using the Web Threat Protection component.

The proxy server is disabled by default.

If you use an activation code to activate devices in an isolated network segment without internet access, you can use Kaspersky Security Center Administration Server as a proxy server for access to Kaspersky activation servers.

In this section

Configuring proxy server settings in the Web Console

Configuring proxy server settings in the Administration Console

Configuring proxy server settings in the command line

Page top
[Topic 264311]

Configuring proxy server settings in the Web Console

In the Web Console, you can configure use of a proxy server in the policy properties (Application settingsGeneral settingsProxy server settings).

Proxy server settings

Setting

Description

Do not use proxy server

If this option is selected, the application does not use a proxy server.

Specify the proxy server settings

If you select this option the application uses the specified proxy server settings to connect to Kaspersky activation servers, to update sources for databases and application modules, to Kaspersky Security Network, and when verifying website certificates using the Web Threat Protection component.

Address

Field for entering the proxy server's IP address or domain name.

This field is available if the Use the specified proxy server settings option is selected.

Port

Field for entering the proxy server's port.

Default value: 3128.

This field is available if the Use the specified proxy server settings option is selected.

Use proxy server authentication

Enables or disables proxy server authentication using a user name and password.

This check box is available if the Use the specified proxy server settings option is selected.

This check box is cleared by default.

When connecting via an HTTP proxy, we recommend to use a separate account that is not used to sign in to other systems. An HTTP proxy uses an insecure connection, and the account may be compromised.

User name

Entry field for the user name used for proxy server authentication.

The entry field is available if the Use proxy server authentication check box is selected.

Edit

Allows you to specify a password for authenticating on the proxy server. The Password field cannot be edited. By default, the password is empty.

To specify a password, click Edit. In the window that opens, enter the password and click OK.

It is recommended to make sure that the password complexity and anti-bruteforce mechanisms ensure that the password cannot be guessed within 6 months.

Clicking the Show button in the window displays the password in clear text in the password entry window.

The button is available if the Use proxy server authentication check box is selected.

Use Kaspersky Security Center as a proxy server for application activation

Enables or disables the use of Kaspersky Security Center Administration Server as a proxy server for accessing Kaspersky activation servers. This is necessary when activating the application in an isolated network segment without internet access using an activation code.

If this check box is selected, the application gains access to activation servers via the Administration Server that has internet access.

This check box is cleared by default.

Page top

[Topic 265701]

Configuring proxy server settings in the Administration Console

In the Administration Console, you can configure the use of a proxy server in the policy properties (General settingsProxy server settings).

Proxy server settings

Setting

Description

Do not use proxy server

If this option is selected, the application does not use a proxy server.

Specify the proxy server settings

If you select this option the application uses the specified proxy server settings to connect to Kaspersky activation servers, to update sources for databases and application modules, to Kaspersky Security Network, and when verifying website certificates using the Web Threat Protection component.

Address and port

Fields for entering the proxy server's IP address or domain name as well as its port.

Default port: 3128.

These fields are available if the Use the specified proxy server settings option is selected.

Use proxy server authentication

This check box enables or disables proxy server authentication using a user name and password.

This check box is available if the Use the specified proxy server settings option is selected.

This check box is cleared by default.

When connecting via an HTTP proxy, we recommend to use a separate account that is not used to sign in to other systems. An HTTP proxy uses an insecure connection, and the account may be compromised.

User name

Entry field for the user name used for proxy server authentication.

The entry field is available if the Use proxy server authentication check box is selected.

Password

Entry field for entering the user password for proxy server authentication.

It is recommended to make sure that the password complexity and anti-bruteforce mechanisms ensure that the password cannot be guessed within 6 months.

Clicking the Show button causes the user's password to be displayed in clear text in the Password field. By default, the user password is hidden and is displayed as asterisks.

The text box and the button are available if the Use proxy server authentication check box is selected.

Use Kaspersky Security Center as a proxy server for application activation

Enables or disables the use of Kaspersky Security Center Administration Server as a proxy server for accessing Kaspersky activation servers. This is necessary when activating the application in an isolated network segment without internet access using an activation code.

If this check box is selected, the application gains access to activation servers via the Administration Server that has internet access.

This check box is cleared by default.

Page top

[Topic 264237]

Configuring proxy server settings in the command line

You can enable or disable the use of a proxy server by application components in the command line with the help of the UseProxy and ProxyServer settings in the general application settings.

You can edit the setting using command line options or a configuration file that contains all general application settings.

The UseProxy setting can take the following values:

  • Yes - enable the use of a proxy server.
  • No: disable the proxy server.

The ProxyServer setting lets you specify proxy server settings in the following format: <connection protocol>://[<user>[:<password>]@]<proxy server address>[:<port>], where:

  • <user> is a user name for proxy server authentication.
  • <password> is a user password for proxy server authentication.
  • <proxy server address> is the IP address or domain name of the proxy server.
  • <port> is the proxy server port.

Connecting to a proxy server over HTTPS is not supported.

When connecting via an HTTP proxy, we recommend to use a separate account that is not used to sign in to other systems. An HTTP proxy uses an insecure connection, and the account may be compromised.

Page top
[Topic 197278]