The documentation has the following information about proxy configuration http://doc.steelcentral.net/help/Configuration%20and%20Reference/wwhelp/wwhimpl/common/html/wwhelp.htm#href=agent_change…
The agent installation asks whether the agent will use a proxy server to connect to the analysis server and, if so, details about the proxy server. This section describes changing these settings after installing the agent:
Edit the dsa.xml file to enable using a proxy server and specify the host and port.
Run the proxy_cred_util script to specify or change credentials for a proxy server.
To enable and set a proxy server for the agent, edit the file <installdir>\Panorama\hedzup\mn\data\dsa.xml. Follow these steps:1)
Stop the dsa process on the agent.––2)
Edit dsa.xml and locate the ProxyServer attributes. If the initial installation did not specify any proxy server, the attributes appear as follows:3)
Change the value of the attributes to enable the server and specify a host and port. For ProxyServerHost, supply a system name, fully-qualified domain name (FQDN), or IP address. For example:4)5)
Changing Credentials with the proxy_cred_util Script
If the proxy server requires authentication, use the proxy_cred_util.sh script in the <installdir>/Panorama/hedzup/mn/support directory (<installdir>\Panorama\hedzup\mn\support\proxy_cred_util.bat on Windows systems) to supply or change credentials. The agent supports proxy servers that use Basic and Digest authentication. It does not support NTLM authentication.
Use the -u argument to specify a user name and password separated by a colon. Use the -r argument to specify a realm, if necessary. For example:
C:\Panorama\hedzup\mn\support>proxy_cred_util.bat -u proxy1:password
2017-07-28 16:27:03.076:INFO::main: Logging initialized @143ms to org.eclipse.jetty.util.log.StdErrLog
Verification of proxy settings has not been requested.
The credentials (with the password obfuscated) are stored in the file <installdir>\Panorama\hedzup\mn\.
#Arguments used for basic and digest proxy authentication
#Fri Jul 28 16:27:03 EDT 2017
Check the DSA.txt log file in the <installdir>\Panorama\hedzup\mn\log\ directory to confirm that the agent connected to the proxy server. Messages similar to the following show that the agent connected successfully:
07/28/2017 03:39:19 PM, dsa , 0x000022cc , INFO , Using proxy server host: nhx1-w2k8r2-19 port: 4080
07/28/2017 03:39:29 PM, dsa , 0x00002a24 , INFO , Websocket: Proxy server is enabled
07/28/2017 03:39:29 PM, dsa , 0x00002a24 , INFO , Websocket: Proxy server host: nhx1-w2k8r2-19 port: 4080
07/28/2017 04:02:59 PM, dsa , 0x00002608 , WARN , Websocket: Unable to connect to Analysis Server at S_10.46.35.80_443_/wsconnect due to ConnectException. Reason: Connection refused: no further information
07/28/2017 04:16:57 PM, dsa , 0x00003c18 , WARN , Websocket: Unable to connect to Analysis Server at S_10.46.35.80_443_/wsconnect due to HttpResponseException. Reason: Unexpected HttpContentResponse[HTTP/1.1 407 Proxy Authentication Required - 2020 bytes] for HttpRequest[CONNECT 10.46.35.80:443 HTTP/1.1]@92c9ffb
In addition to Golan's answer, there is a chance you may have to work with your security team to whitelist the address of your AppInternals/SteelCentral SaaS Analysis Server. Golan and I worked with a customer yesterday to configure his proxy settings as outlined above. Once configured, we got authentication errors. The customer spoke with his security group and discovered the need for the whitelist.
Bryan Wynns, RCSP-APM