- Home
- /
- Article
Thanks for your feedback.
In this article
Feedback?Find out how you can connect your Board, Desk, or Room Series device to a proxy server. A proxy server can help you apply an extra measure of security or apply company policies such as limiting internet usage.
You can configure a Board, Desk, or Room Series device running RoomOS to use a proxy server for HTTPS and WebSocket traffic.
You can add your proxy server details manually or by using auto discovery. Auto discovery uses a URL to locate a configuration file containing the relevant proxy server details.
RoomOS supports the following types of authentication:
-
None
-
Basic
-
Digest
-
Client certificate (mutual TLS), for HTTPS proxy connections
If you want media traffic to go through a proxy server, you also need to set the configuration Webex Meetings HttpProxyForMedia Mode to Auto. Keep in mind that this may lead to lower media quality. To keep media quality as best as possible, the proxy needs to support the bitrates that are used by the deployed devices in the environment, and total round-trip time from the device to the media server should be as low as possible.
-
Access the proxy settings.
-
New or factory reset device: Select Proxy options on the registration screen. You might have to select a call service in the First Time Setup Wizard first - choose Cisco Webex.
-
Registered device: Open the Device Settings. Scroll to Network and service and tap Network connection. On the next screen, select Advanced network settings and scroll down to HTTP Proxy.
-
-
Add the proxy server details manually, by autodiscovery (WPAD), or use a PAC URL script.
-
Manual configuration: Choose Manual from the Proxy options. Enter the Proxy Host IP address/FQDN and the Proxy Port number. To use digest authentication (optional), toggle Proxy server requires authentication ON. Enter a Username and a Passphrase.
-
WPAD: When you choose WPAD from the Proxy options, the HTTP-proxy is fully autoconfigured. Your device gets the Proxy Server's address from DNS or DHCP.
-
PAC URL: Choose PAC URL from the Proxy options and then Enter PAC URL for the PAC (Proxy Auto Configuration) script.
For PAC URLs that use HTTPS, the device validates the server certificate. Make sure the PAC file is hosted on a server with a valid, trusted certificate. Certificate revocation checking for HTTPS PAC files uses OCSP stapling only.
-
-
When you're finished, tap Apply.
Connect to an HTTPS proxy with a client certificate
Your device can connect to a proxy server over HTTPS. If the proxy requires certificate-based authentication, configure a TLS client certificate on the device.
Prerequisite: This feature requires xConfiguration
NetworkServices CommonProxy: Enabled to be enabled.
| 1 |
Set the proxy URL with |
| 2 |
If the proxy certificate isn’t issued by a certificate authority already trusted by the device, add the proxy’s CA certificate. In the web interface, use Security > Custom CA. From the command line, run |
| 3 |
If the proxy requires client-certificate authentication, add the TLS client certificate. In the web interface, use Security > Services > Add Certificate. From the command line, run |
| 4 |
Activate the client certificate for the HTTP proxy by running |
