# Proxy Settings

Endpoint Central requires connection to reach the internet in order to perform the following operations:

- Synchronize Latest Patch and Vulnerability Details with Endpoint Central Database
- Fetch the possible patch executables from Third-Party Vendor websites
- Automatically Fetch Computers Warranty
- Manage Mobile Devices

Periodically, the vulnerability database is updated with that of the Central Patch Repository that resides at Zoho Corp.'s site. Our product uses this configuration to connect to the internet to update the vulnerability database. Internet connection is required to fetch the warranty details of the computers that are managed using our product. If your organisation is imposing network restrictions or if you wanted to manage mobile devices, then you will have to configure the proxy to allow connections reaching the internet. To configure proxy settings,

Select **Threats & Patches → Settings → Proxy Settings**

![Manual proxy configuration fields in Endpoint Central](https://www.manageengine.com/products/desktop-central/help/images/proxysetti.png)

By clicking on **Test Connectivity**, you can check the Internet Connection of the **Central Server**.

If a connectivity check fails, allow the domains required for agent communication and patch downloads through the firewall or proxy. Run the test from the machine where the Central Server is installed. You can also open the affected vendor download URL in a browser on that machine; a timeout confirms that the network or proxy is blocking the download.

Under **Proxy**, you can select:

- **No connection to the Internet**, if the Endpoint Central server is installed in a closed network without Internet connection, such as the Demilitarized Zone (DMZ).
- **Direct Connection to Internet**, if there is no restriction imposed in your organization to access the internet.
- If your organization imposes some restrictions and need to configure proxy manually, you can do the same by selecting **Configure Manually**,and then specify the **HTTP Proxy Host, HTTP Proxy Port**, and then authentication credentials: **Username and Password**.
- If your organization wants to configure proxy automatically, select **Configure Automatically using Script** and then provide the **Proxy PAC URL** (Where all the required specifications are customized) and then authentication credentials: **Username and Password**.

A proxy server and Secure Gateway Server serve different purposes. The proxy server allows the Central Server to connect to vendor websites and download patches or software. Secure Gateway Server provides an additional security layer for communication between internet-based agents and the Central Server.

NAT settings determine how managed devices reach the Central Server over LAN or WAN. See [NAT Settings](https://www.manageengine.com/products/desktop-central/help/admin/nat-settings.html) to select the appropriate communication address for your environment.

For seamless functioning certain domains must be added to the **exception list** of the proxy server. Refer to [this page](https://www.manageengine.com/products/desktop-central/help/server/exceptions-list.html) to know about the exception lists.

## Related

- [Patch database sync failure in an open network](https://www.manageengine.com/products/desktop-central/help/patch-management/open-network-db-sync-failure.html)
- [Patch database sync failure in a closed network](https://www.manageengine.com/products/desktop-central/help/patch-management/closed-network-patch-db-failure.html)