IBM QRadar SOAR

IBM QRadar SOAR

Join this online user group to communicate across Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Back to discussions
Expand all | Collapse all

Question about proxy settings to use the threat sources of both pre-defined(internet) and custom threat source(internal)

  • 1.  Question about proxy settings to use the threat sources of both pre-defined(internet) and custom threat source(internal)

    Posted Thu May 01, 2025 08:22 PM

    Hello soar teams.

    I have a question about the proxy settings for two threat source services:

     (a) one is a pre-defined threat source which requires proxy to reach
     (b) the other is a custom threat source which is located with same subnet and can reach without proxy.

    According to the link of Configuring a proxy for threat feeds, the following commands provides the proxy settings for threat sources.

    sudo resutil configset -key proxyhost -svalue PROXYSERVER 
    sudo resutil configset -key proxyport -ivalue PROXYPORT

    With these commands (a) works, however (b) does not work due to use of proxy in same sub-network.
    On the other hand without the proxy settings, (a) does not work.

    So I felt that this is like a missing no description of "no proxy settings for resutil configset".


    Is there any way to satisfy both (a) and (b) works simultaneously?



    ------------------------------
    Yohji Amano
    ------------------------------


Related Content