DAST

Configuring an HTTP proxy server

• Last updated: August 3, 2026

• Read time: 2 Minutes

If your organization does not allow you to connect to the public internet directly, you can configure a network proxy that the DAST server can use to reach external domains, such as portswigger.net.

To activate your license and perform automatic software updates, the DAST server needs access to portswigger.net on port 443. For the best experience give the server permanent access, rather than just for the initial installation.

1. From the settings menu , select Network.
2. Scroll down to HTTP proxy server and select Use an HTTP proxy server.
3. Enter the Host and Port for your proxy server.
4. If your proxy server requires a login:
   • Select Authenticated.
   • Enter a valid username and password.
5. To use the proxy server for connecting to an SMTP server, select Use proxy to connect to email server.

6. To bypass the proxy for specific hosts, enter them in No proxy for. Click the icon to add additional entries. This is useful for internal hosts that are not reachable through your proxy.

   You can add the following types of entry:

   • An exact hostname, for example internal.example.com.
   • A wildcard that matches all subdomains of a domain, for example *.example.com. This matches subdomains such as api.example.com and a.b.example.com, but not example.com. You can only use the * wildcard at the start of an entry, immediately followed by a dot.
   • An IP address, for example 192.168.0.10 or 2001:db8::1. Wildcards and CIDR ranges are not supported for IP addresses.