The content of Web Proxy Autodiscovery Protocol files (
wpad.dat) is identical to that of
wpad.dat. They are served from the root directory of a web server in your internal network that runs a specifically named web site, which is where browsers are set to "automatically configure the web proxy" to find a
Warning: Internet Explorer 7 may have difficulties working with a
wpad.dat file. http://msdn.microsoft.com/en-us/ie/aa740486.aspx states: "If you are on a network that uses a proxy server, and you notice slowness or a problem connecting to websites after upgrading to Internet Explorer 7, it might be due to web proxy auto-detection problems." This known issue warning then describes the steps of disabling the automatic proxy detection option and manually configuring access to your web proxy as the fix for this problem. If your users will be using Internet Explorer 7, please consider this issue before deciding on this option.
To deploy your
proxy.pac file as a
- Copy the
proxy.pac file that you created in the previous procedure (Creating, Testing, and Deploying a
proxy.pac File) to the root document directory of your web server, and rename it
- Check that a URL in the following form will open the
proxy.pac script in your browser:
www.subdomain.example.org is the fully qualified domain name of the (DNS) domain of which you are a member. You can find the FQDN of your system by typing
ipconfig at the command prompt. The FQDN is the value of "Connection-specific DNS suffix".
- Add an entry to your web server's MIME types configuration:
- Add a record to your DNS server to have
wpad.www.example.org resolve to the web server on which you are hosting the
- Open DNS by selecting Programs|Administrative Tools|DNS from the Windows Start menu.
- In the left tree, expand Forward Lookup Zones, right-click on the forward lookup zone for your domain, and select New Alias (CNAME).
The New Resource Record dialog box is displayed.
- In the Alias name text box, enter
- Click Browse to the right of the Fully qualified domain name text box.
The Browse dialog box is displayed.
- Select the host on which the
wpad.dat file resides, click OK, and click OK again.
- Test that the Automatically detect settings option works in the Tools|Internet Options|Connections|LAN Settings from the menu bar in Internet Explorer.
With the Automatically detect settings option set, your browser will try to find a web server called
wpad.www.example.org and look for a file called
wpad.dat. If it doesn't find it, it will try the next higher in the tree:
wpad.example.org/wpad.dat. When your browser does find the file, the proxy configuration will be automatically updated to use the Web Appliance as its web proxy.
Note: By default, when a connection is established through a proxy server, the hostname of the site and the proxy server name are cached. On future attempts to access the hostname in the same session, Internet Explorer has cached information about which proxy to use. Therefore, all subsequent connections to the host are tried through the proxy that was used previously. This means that if the proxy server name that is cached is unavailable during the same session, the automatic proxy configuration script is not re-processed, and you receive a "Page Cannot Be Displayed" error message in Internet Explorer.
You may want to disable the Automatic Proxy Result Cache to provide the proxy redundancy that you require. This will result in client-side processing of every GET request that is issued by Internet Explorer. As a result, Internet Explorer performance may be impacted depending on the logic of the Automatic Proxy Configuration Script and its size. The procedure for doing this is documented in the Microsoft Knowledgebase article http://support.microsoft.com/kb/271361.
- Instruct your users to do the following: From their Internet Explorer Tools menu, select Internet Options|Connections|LAN Settings and select Automatically detect settings, and then restart Internet Explorer
Once these steps are completed, your users' browser proxy configuration will be automatically updated to use the Web Appliance as their web proxy.
Additionally, you can enforce the application of automatic updates using the
wpad.dat file by Creating a Group Policy Object (GPO).