Enables or disables HTTP proxy settings for a DTI service on an appliance that is managed by a Central Management System appliance. Enabling the settings allows the managed appliance to send requests to the service in the FireEye DTI network through an HTTP proxy. The positive form of the command is typically used to re-enable HTTP proxy settings that were administratively disabled.
Single-port address type—When HTTP proxy settings are enabled, the managed appliance sends requests directly to the DTI service through the HTTP proxy instead of through the managing Central Management System appliance, which otherwise acts as a proxy for DTI network requests. (By default, managed appliances use the single-port address type to communicate with the Central Management System appliance.)
Dual-port address type—By default, HTTP proxy settings are enabled and the appliance sends requests to the HTTP proxy through the Central Management System appliance. You can configure the appliance to bypass the Central Management System appliance and send the requests directly to the HTTP proxy.
See your System Administration Guide or Administration Guide for details about configuring a managed appliance to use an HTTP proxy for a DTI service.
Syntax
[no] fenet dti <service> service proxy enable
Parameters
no
Use the no form of the command to disable HTTP proxy settings for a DTI service.
service
avsuite—The destination to store verdicts for both malicious (blacklist) and nonmalicious (whitelist) objects in the AV-Suite cloud-based detection service.Note
avsuite is deprecated in version 10.0 and replaced with "gcache" in version 10.0 and later releases.
enrollment—The Central Management System appliance that manages the MVX cluster to which sensors and hybrid appliances send submissions for inspection and analysis. This service is used by appliances that submit to or are part of an MVX cluster.faude—The destination for Advanced URL Detection Engine (FAUDE) malware detection and callback intelligence.helix—The destination for health statistics from Helix-enabled appliances.mil—The destination for Malware Intelligence Lab (MIL) malware detection and callback intelligence.
Examples
The following example disables HTTP proxy settings for the AV-Suite service (gcache).
hostname (config) # no fenet dti avsuite service proxy enable(Deprecated in version 10.0)
hostname (config) # no fenet dti gcache service proxy enable(Available in version 10.0 and later releases.
The following example re-enables HTTP proxy settings for the FAUDE service.
hostname (config) # fenet dti faude service proxy enable
User role
Admin or Operator
Command mode
Config
Supported appliances
This command is supported on the following appliances running the specified releases or later:
Malware Analysis: Release 8.3.0
Email Security — Server: Release 8.2.0
File Protect: Release 9.0.0
Network Security: Release 8.3.0
Intelligent Virtual Execution - Server: Release 8.3.0