Command line to set a Proxy_List to an already installed Cortex XDR Agent

[MartinCimone]

Hi.

Does anyone know if there is a command line to set a proxy to an already installed version of Cortex XDR?

I know the proxy can be set using the command line:  Cortex_Installer.msi proxy_list=”<proxy>:<port>”

That being said, I didn’t find any way to change the defined proxy, once the installation is complete, except completely uninstalling the software and re-installing it with the correct Proxy list.

I know I can change it through the Cortex Cloud console but the problem I am facing is that some of our endpoints do not have access to the internet and we are using Cortex Broker VMs as a relay.  So, if someone made a mistake when entering proxy information, that computer will never register with the cloud console, and modifying the proxy won't be available.

TLDR:  is there any command line available to force a Cortex XDR proxy list once the application is installed?

Thanks.

[JohnSmith7732 · Accepted solution]

cytool proxy set "<Proxy IP><Port>"

Should work

Im pretty certain you list several brokers separated by ; or comma. Youll have to check that

[MartinCimone]

Exactly what I was looking for.

Thanks

[AtanasBachvarov]

Hi,

Thank you for the information, though I am unable to change the proxy following your guide. When I attempt to add any of the two  commands you have shared:

cytool proxy set "<Proxy IP><Port>"
Cortex_Installer.msi proxy_list=”<proxy>:<port>”

I get the following message: "cytool" or "Cortex_Installer.msi" is not recognized as an internal or external command. Could you please advise?

Just to clarify I am using Windows 10. Is your post about the Windows 10 Command line or another OS?

Thanks in advance,
Atanas

[MartinCimone]

"cytool.exe" is an executable from Cortex XDR and the folder containing the executable is NOT in the Windows System Path.

You need to be in the Cortex XDR installation folder before running the command.

Ex:   

- Open a Command Prompt "cmd"

- Go to folder C:\Program Files\Palo Alto Networks\Traps

- Run the command to set your proxy:   cytool.exe proxy set 1.1.1.1 8888

That's it.