Proxy Pac - Internet Setttings GPO

beargonefishing
beargonefishing used Ask the Experts™
on
Experts-

Currently have a Barraucda web filter with our remote sites' internet traffic being directed through the User Config/Windows Settings/Internet Explorer Maintenance/Connection/Proxy Settings GPO.

I am finding that when the laptops with the Proxy policy applied travel outside of the network, that they are unable to get on the internet without having the IT dept uncheck those settings for them. This is becoming a huge headache for the support techs and I would like to look at using a PAC file instead deployed through GPO.

Not exactly sure where to start with the PAC file though and how it should be pointed in the GPO. Don't need anything real fancy just a simple one will do. I found this example and was wondering if this would do the trick:

function FindProxyForURL(url, host)
{ if (isPlainHostName(host))
return "DIRECT";
else
return "ip address of proxy:port";
}


Thanks!
Comment
Watch Question

Do more with

Expert Office
EXPERT OFFICE® is a registered trademark of EXPERTS EXCHANGE®
Most Valuable Expert 2011
Commented:
Stop using GPO for this!!!
It is not PAC files you are looking for,...you are looking for WPAD.   PAC files can still be involved,...but they are just a small "piece" of it,...it is WPAD that is the overall technology that is designed for what you are wanting (not GPO,...forget GPO)

http://phillipwindell.wordpress.com/tech-pages/isatmg/wpad-setup/
beargonefishingDirector of Network Infrastructure

Author

Commented:
Thanks for the response. Now will WPAD take care of what I need while the users are on the LAN through DHCP? What about the static IP users.
Most Valuable Expert 2011

Commented:
You have to use both the DHCP and the DNS methods together at the same time,...just as I showed in the article.  DNS handles the static users and DHCP handles the rest.
How to Generate Services Revenue the Easiest Way

This Tuesday! Learn key insights about modern cyber protection services & gain practical strategies to skyrocket business:

- What it takes to build a cloud service portfolio
- How to determine which services will help your unique business grow
- Various use-cases and examples

beargonefishingDirector of Network Infrastructure

Author

Commented:
Ok, following that logic now...What about the wpad script, do you have a general format I could run from.
beargonefishingDirector of Network Infrastructure

Author

Commented:
Or is this the script "http://example.com/wpad.dat" with example.com being the address of the web server..in my case it is a barracuda web appliance..so ip address:port
Most Valuable Expert 2011

Commented:
I do not manually create physical script files.  My frame of reference is MS's ISA or TMG firewall products.  They contain the file in RAM only when they are running,...it does not physically exist and the content of the script is dynamically generated based on the configuration of the ISA/TMG and will change "on the fly" if the configuration is changed.  The Web Proxy Script is wpad.dat. There is also a Winsock Proxy Script called wspad.dat but it is not directly specified, it is already correctly assumed when the wpad.dat file is specified.

But if you are using some other proxy product then the whole thing is subject to however that particular product is designed to handle all this.  The script file will be named whatever you choose to call it.  It will be published from whatever URL you configured it to be published from.   You have to know your own product and know how to apply the configuration to it.

Do more with

Expert Office
Submit tech questions to Ask the Experts™ at any time to receive solutions, advice, and new ideas from leading industry professionals.

Start 7-Day Free Trial