Proxy Configuration on Binalyze AIR Console

Problem Statement

Web proxies like SSL/TLS Proxy, Secure Web Gateway, or similar security solutions are often deployed throughout enterprise networks. Proper proxy and SSL/TLS configuration must be implemented on all the devices behind those security solutions. SSL/TLS proxy configurations are generally configured at the operating system level. If those configurations are not in place, AIR instances behind the security device will not work properly, as they will be unable to access the required services.

Minimum internet Connection Requirements for AIR

The Binalyze AIR console instance needs internet connectivity to access certain services. If any of these connection requirements are not satisfied, the Binalyze AIR console may not work properly. Minimum network connection requirements and associated definitions are listed below.

• https://binalyze.com: This service is used only for update checking. The AIR instance checks this service connection availability every 12 hours. If there is an update the update notification will be shown on the user interface. If it can not access the service the updates won't be shown on the user interface.

• https://api.binalyze.com: This service is used for the RFC3161 time-stamping feature.

• https://license.binalyze.com: This service is used only for standard license control. AIR instance checks this service connection availability every 30 minutes. If it can not access this service 3 times in a row, the system will be locked until the next successful access.

• https://one.binalyze.com: This service is used only for FIS license control. FIS license is charged according to the Case number. The AIR instance checks this service connection availability every 30 minutes. If it can not access this service 3 times in a row, the system will be locked until the next successful access.

• https://cr.binalyze.com: This service is used for downloading update files. Without this access, the update files can not be downloaded.

• https://cdn.binalyze.com: This service is used for downloading installation files. With no access the installation files can not be downloaded and AIR can not be installed.

Proxy Configuration

Web proxies, such as SSL/TLS Proxy, Secure Web Gateway, or similar security solutions, are often deployed throughout enterprise networks. In that case, appropriate proxy and SSL/TLS configuration will be required on the AIR console.

The Proxy server settings of the AIR console shown below are self-explanatory. An administrator can configure both SSL/TLS or non-SSL/TLS proxy settings on the same page. An administrator can enter the IP address, TCP port, username, and proxy server password. An administrator can also import an SSL/TLS certificate as well. PEM, DER, and PKCS formats are supported.