Cisco Cisco Web Security Appliance S690 User Guide
5-19
Cisco IronPort AsyncOS 7.7 for Web User Guide
Chapter 5 Web Proxy Services
Adding PAC Files to the Web Security Appliance
Uploading PAC Files to the Appliance
Step 1
Navigate to Security Services > Proxy Auto-Configuration File Hosting page, and click Enable and
Edit Settings.
Edit Settings.
Step 2
In the PAC Server Ports field, enter one or more port numbers the Web Security appliance should use to
listen for PAC file requests.
listen for PAC file requests.
Step 3
In the Interface field, select the interface the Web Proxy uses to listen for PAC file requests. You can
choose any interface that is configured for data traffic. This field only appears when multiple interfaces
are configured for data traffic.
choose any interface that is configured for data traffic. This field only appears when multiple interfaces
are configured for data traffic.
Step 4
In the PAC File Expiration section, choose whether to allow the PAC file to expire after a specified
number of minutes in the browser’s cache.
number of minutes in the browser’s cache.
Step 5
Click Browse to upload a PAC file from your local machine to the appliance.
Step 6
Navigate to the PAC file location, select it, and click Open.
Step 7
To add another PAC file, click Add Row, and repeat steps
Optionally, PAC files can be served through HTTP proxy ports, such as port 80. To allow this, you must
explicitly configure the hostnames that should serve PAC files and choose a default PAC file for each
hostname. The specified default PAC file name is served when browsers do not include the PAC file name
when requesting the PAC file URL (“GET/” requests). Otherwise, the PAC file name specified in the
URL is served. If a PAC file URL uses an IP address, you can enter the IP address as a configured
hostname.
explicitly configure the hostnames that should serve PAC files and choose a default PAC file for each
hostname. The specified default PAC file name is served when browsers do not include the PAC file name
when requesting the PAC file URL (“GET/” requests). Otherwise, the PAC file name specified in the
URL is served. If a PAC file URL uses an IP address, you can enter the IP address as a configured
hostname.
Step 8
To configure a default PAC file name for different hostnames, in the Hostnames field enter the Web
Security appliance hostname or IP address, or any hostname that resolves to the appliance hostname.
Then choose the default PAC file name in the Default PAC File for “Get/” Request through Proxy Port
field.
Security appliance hostname or IP address, or any hostname that resolves to the appliance hostname.
Then choose the default PAC file name in the Default PAC File for “Get/” Request through Proxy Port
field.
http://ConfiguredHostname/
The configured default PAC file name for
ConfiguredHostname is served if the hostname is configured
on the Security Services > Proxy Auto-Configuration File
Hosting page. This assumes port 80 is a configured port on the
appliance and that hostname is the hostname of the appliance
network interface configured for PAC file hosting. If the
hostname is not configured, an error is returned.
ConfiguredHostname is served if the hostname is configured
on the Security Services > Proxy Auto-Configuration File
Hosting page. This assumes port 80 is a configured port on the
appliance and that hostname is the hostname of the appliance
network interface configured for PAC file hosting. If the
hostname is not configured, an error is returned.
http://IPAddress/filename
The PAC file filename is served if it is configured on the
appliance and exists; otherwise an error is returned.
appliance and exists; otherwise an error is returned.
This assumes that IPAddress is an IP address entered in the
Hostname field on the Security Services > Proxy
Auto-Configuration File Hosting page. If the IP address is not
configured, an error is returned.
Hostname field on the Security Services > Proxy
Auto-Configuration File Hosting page. If the IP address is not
configured, an error is returned.
http://IPAddress/
The configured default PAC file name for IPAddress is served
if the IP address is a configured hostname on the Security
Services > Proxy Auto-Configuration File Hosting page. If
the IP address is not configured, an error is returned.
if the IP address is a configured hostname on the Security
Services > Proxy Auto-Configuration File Hosting page. If
the IP address is not configured, an error is returned.
Table 5-3
PAC File URL Formats
PAC File URL Format
Description