This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

WPAD vs Manual Configuration - Firefox

Hi guys,

I am actually planning a fast an easy to implement my proxy on firefox using FirefoxADM (To manage firefox from GPO) and WPAD file.

So I have my proxy actually configured in Transparent mode and a profile configured in AD SSO (This is the profile that my users are going to use when they will have they browers configured. I am already using as for testing). But I see something pretty odd. When I configure firefox using the manual proxy configuration :

I can see the usernames passing in the HTTP/S live log. (Which is correct). But when I use the automatic proxy configuration URL pointing to my WPAD file containing :


function FindProxyForURL(url, host) {



// Skip the proxy application for the following url's



	if (shExpMatch(url, "*.arborite.com:*/*") ||

		shExpMatch(url, "*.microsoft.com") ||

		shExpMatch(url, "*.windowsupdate.com") ||

		shExpMatch(url, "*.symantec.com"))

	{

		return "DIRECT";

	}

	else 

		return "PROXY monfw01.arborite.com:8080; DIRECT;"; //Fail-over order

}

I do not see the usernames in the HTTP/S live log. Only the IP addresses.

Any ideas? I would surely like more to use the wpad file so we can skip our internal addresses from passing into the astaro...

Thanks,
MojoQC

This thread was automatically locked due to age.

Parents

0 Scott_Klassen over 13 years ago

All the major browsers can support WPAD.dat except Opera.  FindProxyForURL.com - PAC & WPAD Resource

Deployment:  FindProxyForURL.com - PAC & WPAD Resource

You done NEED to host the file on an ASG.  It can be placed on any web server that the clients have access to, thereby it can be accessed on the port of your choosing.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Scott_Klassen over 13 years ago

All the major browsers can support WPAD.dat except Opera.  FindProxyForURL.com - PAC & WPAD Resource

Deployment:  FindProxyForURL.com - PAC & WPAD Resource

You done NEED to host the file on an ASG.  It can be placed on any web server that the clients have access to, thereby it can be accessed on the port of your choosing.
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 BangkokBob over 13 years ago in reply to Scott_Klassen

Bob, Scott thanks for your input,

Whilst Scott points out we can host the wpad.dat file on any server, and it appears this will need to be the way I go, it would be good if Astaro could be used as this control, as it already has the WPAD capability built in, and allows for a dynamic host based upon the ASG name, although for port 8080. Perhaps it could give the option of a secondary IP address for the hosting with either a reminder for the user to generate a wpad DNS record or an automatic static DNS record in Astaro. This way would not require port 8080 which in thinking about this, perhaps is needed due to avoiding problems with the transparent proxy.

Regarding AD, this is fine when everyone is on the one domain, (not always the case) but would not cover the guest network or a DMZ which Wpad can configure or exclude.
Cancel
Vote Up 0 Vote Down

Cancel