Hello, I have an issue to configure properly a Network Connect access using PAC file, the instantproxy created avoids external proxy return: split tunnel with local subnet allowenabled SA 2500 & v7.1r6 NC connection profile using Server-side PAC file (http://<public_server>/proxy.pac) Split Tunneling enabled with allowed access to local subnet the instantproxy has been generated as this: function FindClientProxy(url, host) { return "DIRECT"; } function FindServerProxy(url, host) { if (isPlainHostName(host) || shExpMatch(host, "IVE IP ADDR*") ) return "DIRECT"; if (shExpMatch(url, "private domain") || shExpMatch(url, "*external pac url")) return "DIRECT"; else return "PROXY EXT_IP:80; DIRECT"; } function FindProxyForURL(url, host) { if (shExpMatch(host, "IVE IP ADDR")) { return "DIRECT"; } else if (isInNet(host, "SPLIT-TUN-DENIED-NET", "NETMASK") || isInNet(host, "SPLIT-TUN-DENIED-NET2", "NETMASK")) { return FindClientProxy(url, host); } else if (isInNet(host, "INTERNAL_NET", "NETMASK") || isInNet(host, "INTERNAL_NET2", "NETMASK") || isInNet(host, "INTERNAL_NET3", "NETMASK")) { return FindServerProxy(url, host); } else { return FindClientProxy(url, host); } } And I tried to get something like: function FindProxyForURL(url, host) { if (expMatch( IVEhostÓ, host) return DIRECTÓ; else if (isInNet( split tunnel policyÓ) return DIRECTÓ; else return PROXY external_proxyÓ; due to need external proxy for public web sites, and now matches with FindClientProxy>DIRECT The pac file used into the IExplorer: function FindProxyForURL(url, host) { if (isPlainHostName(host) || shExpMatch(host, "10.*") //private servers || shExpMatch(host, "IVE_ADDRESS*") ) return "DIRECT"; if (shExpMatch(url, "*URL_pac*")) return "DIRECT"; else return "PROXY EXT_Proxy:80;"; }//EOF Could someone help on this? Thank you in advance ... View more