asked on

Troubleshoot Proxy wpad.dat deployment

We are trying to deploy the following PAC via wpad.dat:

function FindProxyForURL(url, host)
{ if (isPlainHostName(host))
return "DIRECT";
else
return "PROXY 10.0.0.36:8080";
}

I have followed the documentation from http://finproxyforurl.com/wpad_tutorial.html

I think my problem is with respect to our web server & IIS. We have a couple servers running IIS with multiple sites. I will admit to having limited IIS knowledge. However, i know the basics; which i would assume is enought to configure this wpad.dat file. Yes, i have conifgured the correct MIME for this file too.

Suggestions?

I am just simply trying to setup a single proxy for all internal users. However; like most offices, we have x number of laptop users - which is why we are trying to deploy wpad.dat.

We are not using ISA for the proxy, we are using a product called Cyblock from Wavecrest. It's an appliance. Servers are running 2003, workstations are running xp sp3, with IE7 or IE8.

Encrypted1024

I only have experience with ISA and wpad.dat but maybe I can help. What issues are you expreiencing? A couple "Gotchas" are that you need to use DHCP option since your proxy is on port 8080. DNS will not work. And make sure Proxy Autodiscover is turned on in IE.

mray77

ASKER

Great, i appreciate the help! does the PAC look right? This is a first for me, and i've been reading every resource available.

I would suspect if this were working that in IE i would see the proxy setting configured while inside the network (auto detect setting is checked). I don't see anything configured, other than auto detect.

Walking through the WPAD Deployment Tutorial, i have completed each step. My concern is IIS. Is there any way to test that the wpad.dat has been configured for deployment correctly, aside from it actually working through IE of course.

ASKER CERTIFIED SOLUTION

Keith Alabaster

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

mray77

ASKER

yes, it is that easy - we only have about 85 users. To confirm, i would be adding the proxy.pac in group policy and not the wpad.dat. Do i even need the wpad.dat if i do it this way then?

Keith Alabaster

No, you don't need the wpad.dat file. That is really only when you create the option 252 entry within the DHCP scope.

mray77

ASKER

Gotcha, so then the policy is not applied when users are offline? Of the 85 users about 20 of them are laptop users that work from home.

I really appreciate the help - this makes much more sense already.

Keith Alabaster

The policy will 'try' and apply - because the policy has already been deployed to the laptop - but as the file is not there, the settings are ignored and everything will be the equivalent of blank.

mray77

ASKER

Thanks!

Encrypted1024

You should not see anything in the settings in IE if it is working. The autoconfigure option will be selected and your users will have internet. I have run into issues with roaming laptop users when trying to populate the settings in IE. Plus if you have non domain connected PC's trying to use the internet you will have to manually configure them . The DHCP option is easy and works well. Then macs and firefox and Ipods all work (If that matters to you).

Here is the MS link on how to configure it.
http://technet.microsoft.com/en-us/library/cc713344.aspx
Some of it pertains to ISA but the wpad DHCP settings are the same.

Keith Alabaster

Fair point - in our own case we specifically do NOT want non-domain users anywhere near our secure network - it is actually a sackable offence to plug non-company equipment into the network.

That said, we supply a completely standalone ADSL Broadband Wireless connection for the ipod/visitors (and internal staff when using personal equipment) to use and so is not an issue.