Setup Network tab

How to point traffic at the collector — DHCP-pushed PAC config, per-host proxy setup, and inspection CA distribution.

The page generates a per-tenant PAC URL the collector serves at https://<collector>:9443/<token>.pac. Hand that URL to your DHCP server (option 252 / WPAD) and every client on the LAN auto-configures.

Per-host alternative (no DHCP integration):

HTTPS_PROXY=http://<collector-ip>:8080
HTTP_PROXY=http://<collector-ip>:8080
SSL_CERT_FILE=/path/to/kilasec-ca.pem

Download the tenant CA from Certificates and trust it on every agent host before sending traffic; the Install a collector guide shows the macOS / Linux / per-process options.