Cisco Cisco Web Security Appliance S170 사용자 가이드

다운로드
페이지 464
 
4-12
AsyncOS 9.0 for Cisco Web Security Appliances User Guide
 
Chapter 4      Intercepting Web Requests
  Using PAC Files with Client Applications
Using PAC Files with Client Applications
Options For Publishing Proxy Auto-Config (PAC) Files
You must publish PAC files where clients can access them. Valid locations are:
Web servers. 
Web Security appliances. You can place PAC files on a Web Security appliance, which appears to 
clients as a web browser. The appliance also offers additional options to manage PAC files, including 
the ability to service requests that use different hostnames, ports, and file names.
Local machines. You can place the PAC file locally on a client’s hard disk. Cisco does not 
recommend this as a general solution, and it is not suited to automatic PAC file detection methods, 
but it can be useful for testing.
Related Topics
.
.
Client Options For Finding Proxy Auto-Config (PAC) Files
If you choose to use PAC files for your clients, you must also choose how clients will find the PAC files. 
You have two options:
Configure client with the PAC file location. Configure the client with a URL that specifically 
points to the PAC file. 
Configure clients to detect the PAC file location automatically. Configure clients to find PAC 
files automatically using the WPAD protocol along with DHCP or DNS. 
Automatic PAC File Detection
WPAD is a protocol that allows the browser determine the location of a PAC file using DHCP and DNS. 
To use WPAD with DHCP, you must set up option 252 on the DHCP server’s with the url of the 
PAC file location. Not all browsers support DHCP, however.
To use WPAD with DNS, you must configure a DNS record to point to the PAC file’s host server. 
You can configure either or both options. WPAD will first try to find PAC files using DHCP, and if it 
cannot, it will then try DNS. 
Related Topics
Hosting PAC Files on the Web Security Appliance
Step 1
Choose Security Services > PAC File Hosting 
Step 2
Click Enable and Edit Settings.