Cisco Cisco Web Security Appliance S170 사용자 가이드
5-17
Cisco IronPort AsyncOS 7.7.5 for Web User Guide
Chapter 5 Web Proxy Services
Adding PAC Files to the Web Security Appliance
Step 1
Rename the PAC file to wpad.dat.
Step 2
Create an internally resolvable DNS name that starts with “wpad,” such as wpad.example.com.
Step 3
Place wpad.dat in the root directory of the website that will host the file, such as wpad.example.com. For
information about placing the file on the Web Security appliance, see
information about placing the file on the Web Security appliance, see
.
Note
Due to a bug in Internet Explorer 6, create a copy of wpad.dat and change the file name to
wpad.da to work with Internet Explorer 6 users. For more information, see
http://www.microsoft.com/technet/isa/2004/ts_wpad.mspx.
wpad.da to work with Internet Explorer 6 users. For more information, see
http://www.microsoft.com/technet/isa/2004/ts_wpad.mspx.
Step 4
Configure the web server to set up .dat files with the following MIME type:
application/x-ns-proxy-autoconfig
Note
If you place wpad.dat on the Web Security appliance, the appliance does this for you already.
Adding PAC Files to the Web Security Appliance
You can configure browsers to explicitly use the Web Proxy by using proxy auto-config (PAC) files. You
can place PAC files on the Web Security appliance, and then configure the browsers in one of two ways:
enter the URL of a PAC file on the appliance, or set the browsers to automatically detect the PAC file by
using the Web Proxy Autodiscovery Protocol (WPAD).
can place PAC files on the Web Security appliance, and then configure the browsers in one of two ways:
enter the URL of a PAC file on the appliance, or set the browsers to automatically detect the PAC file by
using the Web Proxy Autodiscovery Protocol (WPAD).
You can add multiple PAC files to the appliance. You might want to add multiple PAC files if the
appliance is used by multiple domains on the network. You can use one PAC file for all browsers on a
domain.
appliance is used by multiple domains on the network. You can use one PAC file for all browsers on a
domain.
When you add a PAC file to the appliance, you can specify one or more ports the appliance uses to listen
for PAC file requests. For information on specifying the PAC file URL when it is hosted on the Web
Security appliance, see
for PAC file requests. For information on specifying the PAC file URL when it is hosted on the Web
Security appliance, see
.
When a browser asks for a PAC file, the appliance sends the file using HTTP. The PAC file is returned
using MIME type
using MIME type
application/x-ns-proxy-autoconfig
.
Note
When browsers are configured to use a PAC file on the appliance, the URL should include the PAC file
name. If the URL does not specify the PAC file name, by default, the appliance uses default.pac if it
exists and returns an error if it does not. Or, you can configure the default PAC file to use for different
hostnames or domains on the network.
name. If the URL does not specify the PAC file name, by default, the appliance uses default.pac if it
exists and returns an error if it does not. Or, you can configure the default PAC file to use for different
hostnames or domains on the network.
For more information about PAC files, see