---
sourceDocument: Yokohama IT Operations Management
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/yokohama/it-operations-management

 Release :

    - yokohama

ft:locale :

    - en-US

ft:publication_title :

    - Yokohama IT Operations Management

ft:clusterId :

    - itom

bundleId :

    - itom

workflow :

    - Technology


---

# Configure a download proxy for upgrades

# Configure a download proxy for Agent Client Collector upgrades {#ariaid-title1}

* Release version: Yokohama
* 
* Updated May 28, 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 2 minutes to read

Add a proxy server entry so that agents behind a corporate proxy can download upgrade packages from the ServiceNow Content Delivery Network (CDN).

## Before you begin

This configuration applies only to agents connected via Cloud Services (ICS) that can't reach the CDN directly. Agents connected via MID Server download packages from the MID Server or the Install Server and don't use this proxy configuration.

Role required: agent_client_collector_admin

## About this task

Proxy configuration is managed through the Package Download Proxies table. When you add, update, or remove a proxy record, the system reads all active entries sorted by the Order field, generates a
proxy list, and automatically pushes the updated configuration to all agents via MID Server configuration sync. No manual file editing or agent restart is required.

The agent tries each proxy in order, from the lowest Order value to the highest. If a proxy fails, the agent moves to the next entry. To configure a direct connection as a fallback, add an entry with
the URL set to <kbd class="ph userinput">direct</kbd>.

## Procedure

1. Navigate to AllAgent Client CollectorPackage Download Proxies.
2. Select New.
3. Fill in the proxy record fields.  
   {#configure-agent-upgrade-proxy__table_proxy_fields__entry__2}

   | Field | Description |
   |-|-|
   | Name | Descriptive label for this proxy entry, for example <kbd class="ph userinput">US-East Corporate Proxy</kbd>. |
   | URL | Proxy address in host:port format, for example proxy.example.com:8080. Enter <kbd class="ph userinput">direct</kbd> to configure a direct connection with no proxy. |
   | Order | Numeric priority. Lower numbers are tried first. Default is 100. |
   | Active | Selected by default. Clear to disable this entry without deleting it. |
   | Domain | The domain this proxy applies to. Use for domain-separated instances. |
   [Table 1. Package Download Proxies form]

   {#configure-agent-upgrade-proxy__table_proxy_fields}
4. Select Submit.  
   The system generates an updated proxy list and pushes it to all agents via MID Server configuration sync. Changes take effect without an agent restart.
5. **Optional:** Add additional proxy entries to configure failover.  
   Repeat the preceding steps for each proxy, assigning a higher Order value to each successive entry. The agent tries each proxy in order and falls back to the next if the current one fails.

## Proxy with direct connection fallback {#configure-agent-upgrade-proxy__configure-agent-upgrade-proxy-example-1}

The following configuration tries a corporate proxy first. If the proxy is unavailable, the agent connects directly to the CDN.
{#configure-agent-upgrade-proxy__table_proxy_example__entry__4}

| Name | URL | Order | Active |
|-|-|-|-|
| Corporate Proxy | proxy.example.com:8080 | 100 | Yes |
| Direct Fallback | <kbd class="ph userinput">direct</kbd> | 200 | Yes |
[Table 2. Proxy failover example]

{#configure-agent-upgrade-proxy__table_proxy_example}

## What to do next

To temporarily block all CDN downloads, clear the Active check box on all proxy records. With no active entries, the system blocks CDN downloads. This is useful during maintenance windows.

*[\>]: and then