Avatar of beargonefishing
beargonefishing
Flag for United States of America asked on

Proxy Pac - Internet Setttings GPO

Experts-

Currently have a Barraucda web filter with our remote sites' internet traffic being directed through the User Config/Windows Settings/Internet Explorer Maintenance/Connection/Proxy Settings GPO.

I am finding that when the laptops with the Proxy policy applied travel outside of the network, that they are unable to get on the internet without having the IT dept uncheck those settings for them. This is becoming a huge headache for the support techs and I would like to look at using a PAC file instead deployed through GPO.

Not exactly sure where to start with the PAC file though and how it should be pointed in the GPO. Don't need anything real fancy just a simple one will do. I found this example and was wondering if this would do the trick:

function FindProxyForURL(url, host)
{ if (isPlainHostName(host))
return "DIRECT";
else
return "ip address of proxy:port";
}


Thanks!
Windows Server 2003Active DirectoryWeb Browsers

Avatar of undefined
Last Comment
pwindell

8/22/2022 - Mon
ASKER CERTIFIED SOLUTION
pwindell

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
beargonefishing

ASKER
Thanks for the response. Now will WPAD take care of what I need while the users are on the LAN through DHCP? What about the static IP users.
pwindell

You have to use both the DHCP and the DNS methods together at the same time,...just as I showed in the article.  DNS handles the static users and DHCP handles the rest.
beargonefishing

ASKER
Ok, following that logic now...What about the wpad script, do you have a general format I could run from.
Experts Exchange is like having an extremely knowledgeable team sitting and waiting for your call. Couldn't do my job half as well as I do without it!
James Murphy
beargonefishing

ASKER
Or is this the script "http://example.com/wpad.dat" with example.com being the address of the web server..in my case it is a barracuda web appliance..so ip address:port
pwindell

I do not manually create physical script files.  My frame of reference is MS's ISA or TMG firewall products.  They contain the file in RAM only when they are running,...it does not physically exist and the content of the script is dynamically generated based on the configuration of the ISA/TMG and will change "on the fly" if the configuration is changed.  The Web Proxy Script is wpad.dat. There is also a Winsock Proxy Script called wspad.dat but it is not directly specified, it is already correctly assumed when the wpad.dat file is specified.

But if you are using some other proxy product then the whole thing is subject to however that particular product is designed to handle all this.  The script file will be named whatever you choose to call it.  It will be published from whatever URL you configured it to be published from.   You have to know your own product and know how to apply the configuration to it.