Need help - IVE and auto proxy configuration

[icmp_]

Hi,

I am very new with Juniper SA and need your kind advice urgently, I want to use auto proxy (PAC) with my users but no idea whether what I have to do, if I want to use option Automatic (URL for PAC file on another server) under NC profile on IVE.

Please advise, thank you very much.

Regards,

[RKB_]

The option that you are referring to "Automatic (URL for PAC file on another server)" means that you will need to create a PAC file and can store that PAC file on a server (web server). When network connect users connect this file will be sent to them during connection establishment.

more info on this is available on our Admin guides under the section: "Defining Resource Policies: Network connect".

[icmp_]

Dear rakeshb,

Thanks a lot for your advice, so that I need to provide the URL such as http://someserver.com/pac/instantproxy.pac, which "instantproxy.pac" is the PAC file that user is normally using at office's environment, right? I have just tested and got error from Network Connect about "The secure gateway denied the connection request from this client" with error code nc.windows.app.23791, while checking on IVE found error "Network Connect: Connection for user xxxxxxx uses invalid PAC with no PAC contents. Check connection profile settings for valid PAC url."

Regards,

[Kalex_ · Accepted solution]

Did you use an empty PAC file?

Take a look at the Proxy PAC File Guide on how to build a simple PAC file. And don't forget to at least allow access to the server that contains the PAC file, or else it won't work at all.

[icmp_]

Hi,

Thank you so much for advice. It was my stupid that forgot to include this access, from IVE internal interface to web server, into the firewall policy It is working now.

THX,

[Kalex_]

Great! Have fun with it