Cisco Cisco Web Security Appliance S360 信息指南
What is a PAC file and where is it located on WSA?
Document ID: 118082
Contributed by Erick Mechler and Siddharth Rajpathak, Cisco TAC
Engineers.
Engineers.
Jul 25, 2014
Contents
Question:
Question:
What is a PAC file? Where can I host a PAC file on Cisco Web Security appliance?
Environment: Cisco Web Security appliance (WSA)
This Knowledge Base article references software which is not maintained or supported by Cisco. The
information is provided as a courtesy for your convenience. For further assistance, please contact the
software vendor.
information is provided as a courtesy for your convenience. For further assistance, please contact the
software vendor.
A PAC, short for proxy auto−confg, file is a language to inform web browsers how to leverage proxies on
their network. Netscape owns the definition of the PAC file format. More details on this can be found at
http://findproxyforurl.com/netscape−documentation/
their network. Netscape owns the definition of the PAC file format. More details on this can be found at
http://findproxyforurl.com/netscape−documentation/
Microsoft browsers also support PAC file auto−detection, which is outlined at
http://technet.microsoft.com/en−us/library/dd361918.aspx
http://technet.microsoft.com/en−us/library/dd361918.aspx
We can host the PAC file on WSA under GUI > Security Services > PAC file hosting. By default, the proxy
PAC file would be hosted on port 9001.
PAC file would be hosted on port 9001.
When using WSA to host PAC files, by default, we need to point the browser to the following location
http://WSA_IP:9001/pacfile.pac
If the default port is changed in the PAC file hosting settings, then we would need to change the port
accordingly in the above URL.
accordingly in the above URL.
How it works:
The PAC file checks the local IP subnet address of the PC and then makes a decision based on IF / ELSE
statement/s. If the PC is located in a subnet that matches, a proxy server is used. If the PC is on any other
subnet, a direct connection is used instead of the proxy.
statement/s. If the PC is located in a subnet that matches, a proxy server is used. If the PC is on any other
subnet, a direct connection is used instead of the proxy.
function FindProxyForURL(url, host)