My customer has a requirement to bypass the proxy for *most* of their domains, with the exception of just a few URLs. So in their existing PAC file they have a 'localHostOrDomainIs' switch containing these few URLs, followed by a 'dnsDomainIs' function containing the domains, meaning that anything that doesn't match the few URLs gets bypassed from the proxy. Here is an extract from the code:
"// redirect externally hosted internal domain websites via proxy
if (localHostOrDomainIs( host, "www.customer.com.cn" ) ||
localHostOrDomainIs( host, "www.customer.com" ) ||
localHostOrDomainIs( host, "e.customer.com") ||
localHostOrDomainIs( host, "f.customer.com") ||
localHostOrDomainIs( host, "webmail.customer.com") ||
localHostOrDomainIs( host, "globalintranet.customer.com"))
{
{ return "PROXY 10.x.x.x:8080; PROXY 10.y.y.y:8080"; }
}
// any internal DNS hosts go direct
if ( dnsDomainIs( host, ".customer.com") ||
dnsDomainIs( host, ".customer.co.uk") ||
dnsDomainIs( host, ".customer.com.cn" ))
{ return "DIRECT"; }"
It is sadly not possible to do this with Websense Cloud, because there is only an option to add URLs/domains to a bypass list. There needs to be another list, that will be processed earlier in the PAC file, to specify 'sub-URLs' to get around this issue. I am certain that there are many other large organisations who would face this issue if they migrated to Websense Cloud web filtering. I hope that this request will be given serious consideration.
↧
Cloud Web and PAC file modifications
↧