Frame Guest Agent Proxy Server Support

Frame Guest Agent (FGA) has native support for proxy servers. Customers may configure the FGA to use an outbound proxy server, if a proxy server required for all outbound traffic to the Internet. Windows administrators must explicitly set the FGA proxy settings and have those settings persist after a sysprep (during publishing of production VMs that must be joined to a Windows domain), after the domain-joined production VMs are powered on, or when an end user logs into their Windows domain (changes to UEM policy or GPOs). The FGA proxy configuration does not affect the Windows OS, user, or third-party appliciation proxy settings.

Configuration

Using the FrameProxyHelper tool which is available in C:\ProgramData\Frame\Tools, configure all required fields and verify the configuration by “Start test”. Screenshot below shows successful proxy test. Once the test is successful, save the settings to the OS registry.

../_images/proxyhelper.png
  • Use registry values: If unchecked, FrameProxyHelper tool will use the specified Server and Port values. If checked, FrameProxyHelper tool will use the values from the Windows registry.

  • Server: The FQDN or IP address of the proxy server.

  • Port: The port number of the proxy server.

If your proxy server requires user authentication, configure:

  • Use registry values: If unchecked, FrameProxyHelper tool will use the specified Username and Password values. If checked, FrameProxyHelper tool will use the values from the Windows registry.

  • Username: Service account username for the workload VM to connect to Frame Platform.

  • Password: Service account password for the workload VM to connect to Frame Platform.

In order to enable the use of a proxy server and service account authentication to the proxy server, set the two checkboxe values accordingly:

  • Proxy enabled: If unchecked, FGA will ignore the proxy server settings in the registry. If checked, FGA will use the proxy server settings in the registry.

  • Use credentials: If unchecked, FGA will not use the service account values in the registry to authenticate to the proxy server. If checked, FGA will use the service account values in the registry to authenticate to the proxy server.

The VM will need to be restarted for FGA to use the proxy server configuration settings.

Note

For AHV, we recommend this proxy server configuration be done in the Windows template images. If sysprep removes the proxy server settings, you will have to connect into the Sandbox using RDP, after the Frame account is created, to update the FGA’s proxy server settings.

Troubleshooting

To remove the Frame Guest Agent proxy server configuration to troubleshoot, go to the Sandbox and using regedit, delete the contents of:

HKLM\Software\nutanix\frame\fga\proxy\