Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
?
Solved

IE 9 "ignores" .pac auto config script and try to access internet directly

Posted on 2011-10-04
7
Medium Priority
?
12,634 Views
Last Modified: 2013-01-22
Good Day,

I've used a proxy.pac file successfully with older versions of Internet Explorer ( ver 7, 8). It seems like Internet Explorer 9 (running on Windows 7 64-bit) simply ignores the .pac file all together. It tells the web browser to use our proxy server if the notebooks are on our LAN Subnet but IE9 still tries to access the internet directly.

Attached (embedded proxy.txt) is the proxy.pac file I am using that is currently ignored by Internet Explorer 9.

Is there any way to see if IE 9 is indeed looking at the .pac file (for instance with the netstat command one can see all IP connections and there it does not show that the browser has a connection with the proxy server).

Thanks for any guidance / help on getting IE9 to work with a .pac auto configuration script file.


Regards,
Reinhard


 proxy.txt
0
Comment
Question by:ReinhardRensburg
  • 4
  • 3
7 Comments
 
LVL 5

Accepted Solution

by:
greedj earned 2000 total points
ID: 36911402
The pac file works at my org on IE9.

My browser is configured
http:\MyInternalWebSite\Proxy\Proxy.pac


Pac File
function FindProxyForURL(url,host){

      // Because MyDomain.org resolves to a domain controller, direct them to the business proxy instead.
      if (localHostOrDomainIs(host, "MyDomain.org"))
            return "PROXY 10.44.18.70:8080; PROXY 10.194.254.12:8080";

      // Externally hosted MyDomain.org websites need to be proxied via business proxy.
      else if (
            shExpMatch(host, "www.MyDomain.org") ||
            )
            return "PROXY 10.44.18.70:8080; PROXY 10.194.254.12:8080";

      // Internal domains should go direct.  This includes all other .MyDomain.org domains.
      else if (
            isPlainHostName(host) ||
            shExpMatch(host, "10.*") ||
                    dnsDomainIs(host, "localhost")
            )
            return "DIRECT";

      //VPNs that are accessed directly via an IP address should go direct, and not use a proxy
      else if (
            shExpMatch(host, "198.51.22.*") ||
            shExpMatch(host, "198.110.99.*")
            )
            return "DIRECT";

      //FTP protocol in web browser should not use a proxy.  It should go direct.
      else if (url.substring(0,4) == "ftp:")
      return "DIRECT";
      else
            return "PROXY 10.44.18.69:8080; PROXY 10.194.254.13:8080";
}
0
 

Author Comment

by:ReinhardRensburg
ID: 36915103
Hi greedj,

Thanks for the example .pac file,

The way we've set it up is that it is a .pac file copied locally to the Notebooks by a GPO, but when IE9 is told to look at this file (file://c:/proxy.pac) it seems to ignore it regardless of the content of the .pac file.

This .pac file (attached higher up on this support question) works fine on IE 7 and IE8 but even if I modify it to tell IE to use our proxy server for all websites it still tries to access the internet "directly" without even trying to go through the proxy server, so I am trying to establish how one can see if the browser does infact try to work through the proxy server or if it does look at the .pac file, did Microsoft not build something into IE9 that it's got some kind of intelligence to bypass 'n .pac file and follow it's own mind in certain scenarios?

I don't really know where to start looking, perhaps the format of the path to the .pac file is not the same for IE9 and need to change? (we use format "(file://c:/proxy.pac) ")

Thanks,
Reinhard
0
 
LVL 5

Expert Comment

by:greedj
ID: 36920726
You can not put the pac file local. IE will ignore it, its a security feature. It must be hosted on a web server.
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 
LVL 5

Assisted Solution

by:greedj
greedj earned 2000 total points
ID: 36920737
Just drop it on the root of a web server as a test. Then configure IE
http://webserver/proxy.pac
0
 

Author Comment

by:ReinhardRensburg
ID: 36922676
Hi GreedJ,

Thanks I will do that, as a matter of interest, what happens when a notebook cannot see that webserver? (in other words, at work the notebook sees the proxy.pac file on an internal webserver and adheres to it, when the guy now goes hom and the notebook cannot see the proxy.pac will it automatically now assume not to use a proxy server and connect directly? (this is in fact what I would want, might be the solution to my problem...)

Thanks,
Reinahrd
0
 
LVL 5

Assisted Solution

by:greedj
greedj earned 2000 total points
ID: 36928189
You are correct, if the pac file is not available it will go "direct" automatically.
0
 

Author Comment

by:ReinhardRensburg
ID: 36929846
Hi greedj,

Excellent, thanks, this then solves my problem completely :)

Regards,
Reinhard.
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I had to do a bit of research to find the answer to this question so I thought I'd share my results.  Due to our outdated mainframe systems, we need to downgrade IE9 to IE8 in order to stay compatible.  We also needed to downgrade Java.  In order to…
Citrix XenApp, Internet Explorer 11 set to Enterprise Mode and using central hosted sites.xml file.
Shows how to create a shortcut to site-search Experts Exchange using Google in the Chrome browser. This eliminates the need to type out site:experts-exchange.com whenever you want to search the site. Launch the Search Engine Menu: In chrome, via you…
How to create a custom search shortcut to site-search Experts Exchange using Google in the Firefox browser. This eliminates the need to type out site:experts-exchange.com whenever you want to search the site. Launch your Bookmark Menu: Press 'Ctrl +…
Suggested Courses

580 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question