Cisco Cisco Web Security Appliance S670 User Guide

Page of 606
 
5-20
Cisco IronPort AsyncOS 7.7 for Web User Guide
Chapter 5      Web Proxy Services
Advanced Proxy Configuration
For example, if you enter wsa.example.com in the Hostnames field and pacfile1.pac in the Default PAC 
File for “Get/” Request through Proxy Port field, then requests for http://wsa.example.com/ fetch 
pacfile1.pac and requests for http://wsa.example.com/default.pac fetch default.pac.
Step 9
Optionally, repeat step 
 to configure a default PAC file name for all hostnames that resolve to the Web 
Security appliance.
Step 10
Submit and commit your changes.
Understanding WPAD Compatibility with Netscape and Firefox
Netscape and Firefox browsers only use DNS to automatically detect PAC files using WPAD. Therefore, 
if you want Netscape and Firefox browsers to automatically detect a PAC file stored on the Web Security 
appliance, you must complete the following steps:
1.
Name the PAC file wpad.dat.
2.
Navigate to the Security Services > Web Proxy page, and delete port 80 from the HTTP Ports to 
Proxy field. 
3.
Use port 80 as the PAC Server Port when you upload the file to the appliance.
For more information about using WPAD, see 
.
Note
These steps also work with Internet Explorer. However, for Internet Explorer version 6, create a copy of 
wpad.dat and name it wpad.da.
Advanced Proxy Configuration
AsyncOS includes the 
advancedproxyconfig
 CLI command so you can configure more advanced Web 
Proxy configurations, such as authentication and DNS parameters.
The 
advancedproxyconfig
 command includes the following subcommands: