Building an enterprise proxy list

Symantec Endpoint Detection and Response
does not normally inspect traffic between internal computers. A proxy server usually has an IP address in the internal range, so if the proxy sits between
Symantec EDR
and the Internet, all traffic between protected endpoints and the Internet appears as internal traffic. When you add the proxy server IP address to the
Enterprise Proxy
list, however,
Symantec EDR
treats all traffic to the proxy as outbound network traffic and inspects it.
Configure an enterprise proxy only if
Symantec EDR
is on the LAN side of the proxy. Otherwise, the appliance does not inspect traffic between the proxy and the Internet. If you use a single-leg proxy, Symantec recommends that you configure the
Symantec EDR
enterprise proxy so that it only inspects traffic between the proxy and the internal networks.
  1. To build the default enterprise proxy list
  2. On the left navigation pane, click
    Settings
    >
    Appliances
    .
  3. Click the
    Edit Default Appliance
    icon.
  4. In the
    Enterprise Proxy
    panel, click
    +Add Enterprise Proxy
    .
  5. In the
    Add Enterprise Proxy
    dialog box, in the
    IP Address
    field, enter the IP address of the enterprise proxy server.
  6. Click
    Save
    .
  7. Repeat steps In the Enterprise Proxy panel, click +Add Enterprise Proxy. to Click Save. for each additional enterprise proxy in your network.
  8. To apply the default enterprise proxy settings to a device
  9. On the left navigation pane, click
    Settings
    >
    Appliances
    .
  10. Click the appliance name in the
    Appliances
    list.
  11. In the
    Enterprise Proxy
    panel, check
    Use Default
    .
    Use Default
    is not available until you configure the default enterprise proxy.
  12. To build a custom enterprise proxy connection for a single device
  13. On the left navigation pane, click
    Settings
    >
    Appliances
    .
  14. Click the appliance name in the
    Appliances
    list.
  15. In the
    Enterprise Proxy
    panel, uncheck
    Use Default
    , if it is checked.
  16. Click
    +Add Enterprise Proxy
    .
  17. In the
    Add Enterprise Proxy
    dialog box, in the
    IP Address
    field, enter the IP address of the enterprise proxy server.
  18. Click
    Save
    .
  19. Repeat steps In the Enterprise Proxy panel, uncheck Use Default, if it is checked. to Click Save. for each additional enterprise proxy in the network that is scanned by this device.