topic Re: Command line to set a Proxy_List to an already installed Cortex XDR Agent in Cortex XDR Discussions

Command line to set a Proxy_List to an already installed Cortex XDR Agent

MartinCimone — Tue, 15 Sep 2020 19:35:03 GMT

Hi.

Does anyone know if there is a command line to set a proxy to an already installed version of Cortex XDR?

I know the proxy can be set using the command line: Cortex_Installer.msi proxy_list=”<proxy>:<port>”

That being said, I didn’t find any way to change the defined proxy, once the installation is complete, except completely uninstalling the software and re-installing it with the correct Proxy list.

I know I can change it through the Cortex Cloud console but the problem I am facing is that some of our endpoints do not have access to the internet and we are using Cortex Broker VMs as a relay. So, if someone made a mistake when entering proxy information, that computer will never register with the cloud console, and modifying the proxy won't be available.

TLDR: is there any command line available to force a Cortex XDR proxy list once the application is installed?

Thanks.

Re: Command line to set a Proxy_List to an already installed Cortex XDR Age

JohnSmith7732 — Tue, 15 Sep 2020 20:42:20 GMT

cytool proxy set "<Proxy IP><Port>"

Should work

Im pretty certain you list several brokers separated by ; or comma. Youll have to check that

Re: Command line to set a Proxy_List to an already installed Cortex XDR Age

MartinCimone — Thu, 17 Sep 2020 11:40:47 GMT

Exactly what I was looking for.

Thanks

Re: Command line to set a Proxy_List to an already installed Cortex XDR Age

AtanasBachvarov — Tue, 14 Jun 2022 11:56:14 GMT

Hi,

Thank you for the information, though I am unable to change the proxy following your guide. When I attempt to add any of the two commands you have shared:

cytool proxy set "<Proxy IP><Port>"
Cortex_Installer.msi proxy_list=”<proxy>:<port>”

I get the following message: "cytool" or "Cortex_Installer.msi" is not recognized as an internal or external command. Could you please advise?

Just to clarify I am using Windows 10. Is your post about the Windows 10 Command line or another OS?

Thanks in advance,
Atanas

Re: Command line to set a Proxy_List to an already installed Cortex XDR Age

MartinCimone — Tue, 14 Jun 2022 12:05:30 GMT

"cytool.exe" is an executable from Cortex XDR and the folder containing the executable is NOT in the Windows System Path.

You need to be in the Cortex XDR installation folder before running the command.

Ex:

- Open a Command Prompt "cmd"

- Go to folder C:\Program Files\Palo Alto Networks\Traps

- Run the command to set your proxy: cytool.exe proxy set 1.1.1.1 8888

That's it.

Re: Command line to set a Proxy_List to an already installed Cortex XDR Agent

eluis — Tue, 14 Jun 2022 12:48:42 GMT

additionally you can add C:\Program Files\Palo Alto Networks\Traps to your windows path

KR,
Luis

Re: Command line to set a Proxy_List to an already installed Cortex XDR Age

AtanasBachvarov — Tue, 14 Jun 2022 13:56:42 GMT

Thank you! Should there be the symbol ":" , between the Proxy IP and the Port please?

I do appreciate your patience with my query 🙂

Re: Command line to set a Proxy_List to an already installed Cortex XDR Age

AtanasBachvarov — Tue, 14 Jun 2022 15:00:24 GMT

Thank you! Should there be the symbol ":" , between the Proxy IP and the Port please?

Re: Command line to set a Proxy_List to an already installed Cortex XDR Age

MartinCimone — Tue, 14 Jun 2022 15:20:09 GMT

YES!

The exact command line is:

cytool.exe proxy set 10.10.10.10:8888 (Use the IP and port configured in your BrokerVM)

Re: Command line to set a Proxy_List to an already installed Cortex XDR Age

AtanasBachvarov — Wed, 15 Jun 2022 08:49:10 GMT

Thank you all so much Martin! Is there a way to add two Proxies at the same time please? 🙂

Again your feedback is deeply appreciated.

Re: Command line to set a Proxy_List to an already installed Cortex XDR Age

MartinCimone — Wed, 15 Jun 2022 14:03:34 GMT

Sure you can.

Just separate each value with a comma ",".

Ex: cytool.exe proxy set 10.10.10.10:8888,11.11.11.11:8888

Re: Command line to set a Proxy_List to an already installed Cortex XDR Age

AtanasBachvarov — Wed, 15 Jun 2022 14:09:32 GMT

Makes sense, thank you once again Martin!

Re: Command line to set a Proxy_List to an already installed Cortex XDR Agent

MosR — Fri, 13 Oct 2023 14:48:25 GMT

Set or query cloud-defined proxies for the agent.

Usage:

cytool proxy query—Displays the current status of cloud-defined proxy settings.
cytool proxy set <list>—Set cloud-defined proxy settings to the proxies defined in <list>. For example: cytool proxy set "192.168.50.1:8080,192.168.60.2:808"
cytool proxy set “”—Disable cloud-defined proxy.

Re: Command line to set a Proxy_List to an already installed Cortex XDR Agent

MosR — Fri, 09 Feb 2024 17:58:15 GMT

You can now just right click on an endpoint and add it to your proxy if you are on Cortex XDR V3.8.