All Apps and Add-ons

Use a Proxy for receiving Cylance TDR data

eichfuss
Path Finder

Is there a easy way (without editing the api.py script) to configure proxy authentication for the scripted input, in the CylancePROTECT App, to receive the Cylance TDR data?

Thanks,
Sven

0 Karma

fatemabwudel
Path Finder

So, that means it will not work if the Splunk forwarder is on a net 10 (10.0.x.x) address? since I also couldn't find where to define the proxy IP and port in the App, so that it's able to connect to the internet.

Any way it could be included in the py scripts the App ships with?

Thanks,
Fatema.

0 Karma

TonyLeeVT
Builder

Unfortunately there is no proxy support at this time. Is it possible to whitelist the URL from your Heavy Forwarder?

Get Updates on the Splunk Community!

Enterprise Security Content Update (ESCU) | New Releases

In September, the Splunk Threat Research Team had two releases of new security content via the Enterprise ...

New in Observability - Improvements to Custom Metrics SLOs, Log Observer Connect & ...

The latest enhancements to the Splunk observability portfolio deliver improved SLO management accuracy, better ...

Improve Data Pipelines Using Splunk Data Management

  Register Now   This Tech Talk will explore the pipeline management offerings Edge Processor and Ingest ...