Link to home
Start Free TrialLog in
Avatar of beargonefishing
beargonefishingFlag for United States of America

asked on

Proxy Pac - Internet Setttings GPO


Currently have a Barraucda web filter with our remote sites' internet traffic being directed through the User Config/Windows Settings/Internet Explorer Maintenance/Connection/Proxy Settings GPO.

I am finding that when the laptops with the Proxy policy applied travel outside of the network, that they are unable to get on the internet without having the IT dept uncheck those settings for them. This is becoming a huge headache for the support techs and I would like to look at using a PAC file instead deployed through GPO.

Not exactly sure where to start with the PAC file though and how it should be pointed in the GPO. Don't need anything real fancy just a simple one will do. I found this example and was wondering if this would do the trick:

function FindProxyForURL(url, host)
{ if (isPlainHostName(host))
return "DIRECT";
return "ip address of proxy:port";

Avatar of pwindell
Flag of United States of America image

Link to home
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of beargonefishing


Thanks for the response. Now will WPAD take care of what I need while the users are on the LAN through DHCP? What about the static IP users.
You have to use both the DHCP and the DNS methods together at the same time,...just as I showed in the article.  DNS handles the static users and DHCP handles the rest.
Ok, following that logic now...What about the wpad script, do you have a general format I could run from.
Or is this the script "" with being the address of the web my case it is a barracuda web ip address:port
I do not manually create physical script files.  My frame of reference is MS's ISA or TMG firewall products.  They contain the file in RAM only when they are running, does not physically exist and the content of the script is dynamically generated based on the configuration of the ISA/TMG and will change "on the fly" if the configuration is changed.  The Web Proxy Script is wpad.dat. There is also a Winsock Proxy Script called wspad.dat but it is not directly specified, it is already correctly assumed when the wpad.dat file is specified.

But if you are using some other proxy product then the whole thing is subject to however that particular product is designed to handle all this.  The script file will be named whatever you choose to call it.  It will be published from whatever URL you configured it to be published from.   You have to know your own product and know how to apply the configuration to it.