How to set up Elements Connector as ultimate proxy so that Elements Agents can validate subscription through it?

Issue:

How to set up Elements Connector as ultimate proxy so that Elements Agents can validate subscription through it? For example if there are devices in an offline or restricted environment that needs to be able to connect to the Elements portal through the Elements Connector acting as a proxy.

Resolution:

It is possible to install the Elements agent in offline mode if the device can connect to an Elements Connector that acts as an Ultimate proxy, meaning all traffic between the endpoints and cloud services go through the Elements Connector: Elements Connector overview | Elements Connector | Latest | WithSecure User Guides 

First install an Elements Connector: Deploying Elements Connector | Elements Connector | Latest | WithSecure User Guides 

Then create a profile for the offline devices:

1. Log in to the Elements portal
2. Navigate to the Security configurations > profiles page
3. Click Create a profile
4.  Navigate to the Basic > Communication page
   1. Enter the Elements Connector address to the "Proxy servers and WithSecure Connectors" list and enable Proxy, WS Connector and Software Updater WS Connector
   2. Use HTTP proxy = Remotely managed
   3. Use WithSecure Elements Connector = If possible
5. Click Create profile

To proceed, make sure that the machine where you're installing the Elements Agent can connect to the Elements Connector you've installed. Here are the steps to check the connection towards Elements connector from that machine:

1. Go to browser of your Windows machine
2. Open the web browser
3. Enter the Elements connector's IP address using http and https protocol:
   1.  http://ip_adress_of_elementsconnector:http_portnumber
   2.  https://ip_adress_of_elementsconnector:https_portnumber
4. Make sure you see the Elements connector's status page, without any SSL certificate warning or other warning.
5. Also, make sure the Elements connector's http and https ports have been allowed and not using by other services

Now you can install the Elements agent using .EXE installer with the following command line parameter:

1. Navigate the location or path of installer has been saved in command prompt and execute the below command:
   1. installer_name.exe –connector-proxy http://ip_adress_of_elementsconnector:http_portnumber

Note: Please replace insaller_name.exe and ip_adress_of_elementsconnector:http_portnumber with actual value. Refer to the following link for more information on command-line parameters: Command-line parameters | Elements Endpoint Protection | Latest | WithSecure User Guides 

Once the device has appeared in the Elements Security Center portal's Environment > Devices page, you can assign the profile that you created for the offline devices so that all communication will go through the Elements Connector:

1. Navigate to the Environment > Devices page
2. Select the devices from the devices list
3. Click Assign profile 
4. Select the profile 
5. Click Assign profile