When setting up the Beacon its possible to route it through a reverse proxy, in the image above this is explained, The agents only have network availability to the reverse proxy server (Davecorp) However the agents will instead try and target the beacon (Flexbeacon123)
To alter the agent's behaviour to instead upload to the reverse-proxy instead of directly attempting the beacon we need to access the beacon server itself and open the beaconengine.config file-
Locally on the beacon open this file in notepad.
Within this file, you will see the following, see the circled entry.
By entering information in the networkName field and saving this file with these new details it will update the agents on their next policy update.
Keep in mind that the agents will need connectivity to perform this policy update
Jun 30, 2020 08:34 AM
Normally we use the Networkname when we would like to use the CName instead of the FQDN of an Beacon.
Can you please explain how this related to the proxy? As you are using the same field for that. Meaning you are basically pointing towards the proxy. That is no webserver and neither does it know which beacon it should contact. So How would that work?
not sure if I follow completely but this process is best explained as giving the beacon a "Fake" Identity within the policy,
If the beacon is called for example "Davesbeacon123.flexera.com" but the agents have to first pass through a proxy called "davesproxy.externalnetwork.com" the agents are never going to be able to communicate to the rest of the fnms system as they will be trying to communicate with "Davesbeacon123.flexera.com" as this is what is included in the policy.
The technique in the KB explains how to give the Beacon a "Fake" identity within the beacon so that the policy will display this with whatever information we enter. So, for example, we can give the beacon "Davesbeacon123.flexera.com" a "Fake" identity of "davesproxy.externalnetwork.com" and this will then be populated in the policy for the agents to consume, this means the agents will then be able to communicate to the beacon via the proxy as it will be updated with this value in their policy.
hope this makes sense, it can be tricky to explain in text
Thanks for your response. I have been using the Networkname a lot, but I just don't see the link with the proxy. If I follow your story the agent is trying to go to : davesproxy.externalnetwork.com that is the proxy server at that moment.
But what I don't understand is the part from there. If the agent contacts the davesproxy.externalnetwork.com proxy server instead of an beacon. The agent for example tries to upload an ndi or ask for an policy update. Since the davesproxy.externalnetwork.com ends up at the proxy instead of an Beacon server. How can the proxy then help the agent? As it is an proxy and no Beacon server. Neither does the proxy know about the existince of Davesbeacon123.flexera.com beacon and other beacons like Ronaldsbeacon123.flexera.com ?
Hope i made it more clear 🙂
Ah I understand, the proxy would forward on the request
so agent requests to post a file to
request get sent to proxy, proxy forwards requests to:
this change does not change the URL of the beacon itself it just changes its value within the policy itself so that the agent is instructed talk to the proxy instead of the beacon directly
So shall I use network name as http://davesproxy.davesnetwork.com/managesoftrl
And what about mangesoftdl for downloading the policy file?
Is it a feasible solution in a running environment?
We have number of beacons and what will happen with agent configuration
Hi @dcollins ,
Is it only going to support http: port 80 ?
HTTPS:443 is not supported ?
Can I use the same steps over Load Balancer URL?
Hi @dcollins ,
thanks for the article, just want to double check.
If we have 3 beacons, where 2 of them are for internal and one for internet facing devices.
We don't touch the first ones and just change this for the 3rd one?
Should we be using IP or can we use the host name?
Also where can we check if the correct info is gathered on an endpoint?
Thanks in advance.