Solved

PAC file for proxy autoconfig across a WAN

Posted on 2012-03-13
9
1,070 Views
Last Modified: 2012-04-16
We currently use WPAD and it works fine, but our network department wants to change to use a PAC file on a BlueCoat (BC) using an autoconfig script.  We need PC's in one region to use one BC and PC's in another region to use another.  They asked me to create a DNS file that will change the IP of the hostname depending on the region.  I do not know if this is possible.  If it is, that would be cool.

So then he asked about putting the BC's behind an F5 which we only have at one location.  Seems this would not be too effective since we do not have an F5 Cluster across the WAN.  But we could go this route if we wanted to change.

Do you have any ideas for me?  They are being persistent, we are happy with WPAD so would like to hear your ideas of the Pros and Cons of WPAD through IIS rather than PAC file through autoconfig script.  ..and any way to do this better.  Cluster the Bluecoats across the WAN possibly?

We have IE, Chrome and Firefox.

Thank you.
0
Comment
Question by:stowyo
  • 5
  • 4
9 Comments
 
LVL 10

Expert Comment

by:ujitnos
ID: 37718538
You cannot have a DNS resolve to different IP, based on locations. what you can do is configure the proxy with same IP in both the location but make it non-routable between the locations so the same WPAD can be used within the same region with separate Bluecoat devices.

Else use PAC file and mention in it saying that if traffic from Region1 LAN - Use BC 1, if host IP from Region 2 LAN - Use BC 2

Examples of PAC can be found here

http://www.findproxyforurl.com/pac_file_examples.html
0
 
LVL 1

Author Comment

by:stowyo
ID: 37719801
Yea, what they want to have is one autoconfig script for all locations which is easy enough in terms of the contents of the PAC file.  What confuses me is how we can have the same hostname for all the Bluecoats without a cluster.  Each Bluecoat has a different IP and must stay that way.
0
 
LVL 10

Expert Comment

by:ujitnos
ID: 37731855
Your BC in site 1 might have 1.1.1.1 and the DNS in site 1 will resule to this IP and in site 2 the BC ip 2.2.2.2 should be resolved by the site 2 DNS. 1.1.1.1 should only be routable within site 1. Keep the hostname same in both the sites.
0
Microsoft Certification Exam 74-409

Veeam® is happy to provide the Microsoft community with a study guide prepared by MVP and MCT, Orin Thomas. This guide will take you through each of the exam objectives, helping you to prepare for and pass the examination.

 
LVL 1

Author Comment

by:stowyo
ID: 37738106
If I could do that, great.  How do I do that with DNS?  It is 2008 Server R2 and the DNS servers overseas replicate with my america DNS servers.  Originally you told me I could not do this with DNS
0
 
LVL 10

Expert Comment

by:ujitnos
ID: 37745754
Like i said, both DNS will have same entry. but the IP address should not be routable across the two sites
0
 
LVL 1

Author Comment

by:stowyo
ID: 37749771
Yea, that is not really a solution.  We are a good size enterprise and looking for a more solid solution.  Maybe I will contact BlueCoat directly and see what they recommend.
0
 
LVL 10

Expert Comment

by:ujitnos
ID: 37750922
Then the only option is use of PAC files.
0
 
LVL 1

Accepted Solution

by:
stowyo earned 0 total points
ID: 37754263
Actually no.  WPAD is what we use now and I can think of a way to distribute that.  I would like to find a way to distribute a PAC file across a WAN, that is solid.  Your solution is not acceptable.
0
 
LVL 1

Author Closing Comment

by:stowyo
ID: 37850346
No real help.  He was telling me something I already did.  I was looking for the alternate.  Just delete this entire chain out.
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Short answer to this question: there is no effective WiFi manager in iOS devices as seen in Windows WiFi or Macbook OSx WiFi management, but this article will try and provide some amicable solutions to better suite your needs.
Most of the applications these days are on Cloud. Cloud is ubiquitous with many service providers in the market. Since it has many benefits such as cost reduction, software updates, remote access, disaster recovery and much more.
Google currently has a new report that is in beta and coming soon to Webmaster Tool accounts. This Micro Tutorial will highlight new features for Google Webmaster Tools.
Shows how to create a shortcut to site-search Experts Exchange using Google in the Chrome browser. This eliminates the need to type out site:experts-exchange.com whenever you want to search the site. Launch the Search Engine Menu: In chrome, via you…

813 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now