Corporate networks: proxies, TLS inspection and outbound controls

Corporate networks: proxies, TLS inspection and outbound controlsProxy selection and PAC, proxy sign-in, TLS-inspection certificates, the server's SSRF guard and the database TLS floor. Everything below is set in config.ini or with the environment variable named beside it; the environment variable wins. Settings → Network shows what is in force on a machine and where it came from. The test reaches an address exactly as the AI model or a licence check would, and reports the proxy and certificate store it used, with a plain-language hint for the usual failures: an untrusted inspection root, proxy sign-in, DNS, or a firewall.

Where to find it

Settings → Settings → Set / Restore → Network → Test a connection

What this page covers

Proxies
Proxy sign-in
TLS inspection
SSRF guard (server mode)
Database TLS floor

Settings and controls documented

[network] use_system_ca=0
[network] extra_ca_file=
—
[network] allow_private_targets=1
[network] allow_hosts=a.corp|.bank.local
[database] min_tls=prefer|require|verify-ca|verify-full

Full page

The full page — procedures and the explanation of every setting — is available to signed-in users.

ATX Institute on LinkedIn

This site needs JavaScript for the full experience. Every page above is reachable without it.