Add a Proxy (Windows computers)

Applies To: WatchGuard EPDR, WatchGuard EDR, WatchGuard EPP

When you create a network settings profile for a computer, you can add proxies that computers on your network use to connect to WatchGuard Cloud. Access to WatchGuard Cloud through a proxy is only available for Windows computers.

You can add or designate more than one computer on the network as a proxy. When there are multiple proxies, WatchGuard Endpoint Security uses the first proxy to connect to WatchGuard Cloud by default. Proxy computers can serve a variable number of devices, depending on the hardware resources installed. As a general rule, a proxy computer can serve a maximum of 100 computers.

Proxies cannot download patches or updates through the Patch Management module. Only computers with direct access to WatchGuard Cloud or with indirect access through a corporate proxy can download patches.

Proxy Types

In the Add Proxy dialog box, you can select the proxy type you want to add:

  • Corporate proxy
  • Automatic Proxy Discovery Using Web Proxy Autodiscovery Protocol (WPAD)
  • WatchGuard proxy

If you select no proxy, access to the Internet is direct, not through a proxy. WatchGuard Endpoint Security uses the computer settings to communicate with WatchGuard Cloud.

We recommend that you configure a WatchGuard proxy only to enable isolated computers (those without an Internet connection, either direct or through a corporate proxy) to access WatchGuard Cloud. If no WatchGuard proxies are available, you must first designate a computer as a WatchGuard proxy. For more information, see Designate a Computer as a WatchGuard Proxy .

When you add a corporate proxy, access to the Internet is through a proxy installed on the company network.

To add a corporate proxy:

  1. From the left pane, select Network Settings.
  2. Select an existing security settings profile to edit, copy an existing profile, or in the upper-right corner of the page, click Add to create a new profile.

    The Add Settings or Edit Settings page opens.

Screen shot of WatchGuard Endpoint Security, Add proxy

  1. In the Name text box, type a name for the settings profile.
  2. (Optional) In the Description text box, type a brief description of the settings profile.
  3. Select Proxy.

    4. Screen shot of WatchGuard Endpoint Security, No proxy

  4. Click .
    The Add Proxy dialog box opens.
  5. Select Corporate Proxy.

Screen shot of WatchGuard Endpoint Security, Add proxy dialog box

  1. Configure the proxy parameters.
    • Address — Enter the proxy server IP address.
    • Port — Enter the proxy server port.
    • The proxy requires authentication — Enable this toggle when the proxy requires a user name and password.
      • User name — Enter the user name of an existing account that has permission to log on to the proxy computer.
      • Password — Enter a password of the proxy account.
  2. Click Add.
    For information on how to configure precedence of multiple proxies in a network settings profile, see Configure the Proxies List (Windows computers).
  3. Click Save.
    The settings profile appears in the list.
  4. Select the profile and assign recipients, if required.
    For more information, see Assign a Settings Profile.

Access to the Internet is through a proxy that is discoverable through Web Proxy Auto-Discovery (WPAD) protocol. This method uses DNS or DHCP to query the network and get the discovery URL that points to the proxy auto-configuration (PAC) file. WPAD protocol is primarily used in networks where clients are only allowed to communicate externally through a proxy.

To add a proxy through WPAD protocol:

  1. From the top navigation bar, select Settings.
  2. From the left pane, select Network Settings.
  3. Select an existing security settings profile to edit, copy an existing profile, or in the upper-right corner of the page, click Add to create a new profile.
    The Add Settings or Edit Settings page opens.

Screen shot of WatchGuard Endpoint Security, Add settings

  1. In the Name text box, type a name for the settings profile.
  2. (Optional) In the Description text box, type a brief description of the settings profile.
  3. Select Proxy.

    4. Screen shot of WatchGuard Endpoint Security, No proxy

  4. Click .
    The Add Proxy dialog box opens.
  5. Select Automatic proxy discovery using Web Proxy Autodiscovery Protocol (WPAD).

Screen shot of WatchGuard Endpoint Security, Add Proxy dialog box

  1. (Optional) In the URL text box, type the HTTP or HTTPS URL that hosts the PAC configuration file.
  2. Click Add.
    For information on how to configure precedence of multiple proxies in a network settings profile, see Configure the Proxies List (Windows computers).
  3. Click Save.
    The settings profile appears in the list.
  4. Select the profile and assign recipients, if required.
    For more information, see Assign a Settings Profile.

See Also

Configure Network Settings

Designate a Computer as a WatchGuard Proxy