Autoproxy only allows google domains

[olong_work]

Hello,

 

im currently trying to fix a school using the RM safetynet system that is having issues after changing the subnet mask.

the issue is on autoproxy the device can only talk to google domains (e.g. google.co.uk, youtube.com or gmail.com) any other website (e.g. bbc.co.uk/news or RM Education - Proxy Test) does not work. this is for all devices on the network not just ones configured on the domain. this happens on all OS's (windows, OSX, android & IOS ) .

as soon as a manual proxy is set the device is fine but this is not workable for devices that go offsite

 

I have checked the devices configuration to see if its got a tattooed PAC or fixed proxy and they doesn't have anything saved

i have also checked DHCP and DNS and these are configured correctly and work with the manual proxy

 

many thanks for any help.

[DGardiner]

Hello,

 

im currently trying to fix a school using the RM safetynet system that is having issues after changing the subnet mask.

the issue is on autoproxy the device can only talk to google domains (e.g. google.co.uk, youtube.com or gmail.com) any other website (e.g. bbc.co.uk/news or RM Education - Proxy Test) does not work. this is for all devices on the network not just ones configured on the domain. this happens on all OS's (windows, OSX, android & IOS ) .

as soon as a manual proxy is set the device is fine but this is not workable for devices that go offsite

 

I have checked the devices configuration to see if its got a tattooed PAC or fixed proxy and they doesn't have anything saved

i have also checked DHCP and DNS and these are configured correctly and work with the manual proxy

 

many thanks for any help.

if youve changed the subnet have you updated the routers interface aswell?

[olong_work]

sorry i forgot to say we have done that as well as once the proxy is set the device connects fine. Edited September 4, 2020 by olong_work

[6Foot2]

...as soon as a manual proxy is set the device is fine but this is not workable for devices that go offsite...

Proxy Switcher?

 

Link: Proxy Switcher

 

Proxy Switcher is a small tray icon type utility that allows you to select whether Windows and Mozilla Firefox should use a proxy server for Internet access in a couple of clicks.

 

No more digging around in the Internet Options screen for Windows or the Advaced tab in Firefox. Simply right click on the tray icon and choose 'Home' for a direct connection to the Internet or 'Office' to use the proxy, there is even an 'Auto' option which will change the setting for you when you connect to your work/home or work VPN network.

 

Proxy Switcher even informs your Windows environment of the changes so you don't need to restart applications such as Internet Explorer or MSN Messenger when the proxy settings change.

 

[PyROm]

Have you checked that the machines have a direct route through to get the proxy.pac? eg. the proxy.pac is accessible on the new subnet without going through the proxy itself, or is allowed to pass through the firewall to the appropriate server?

[olong_work]

so dose autoproxy not grab from a configuration file. i cannot locate the .PAC file on our network and was under the understanding that the IP did not affect the proxy and it was all to do with internal configuration. is there a default location for the Auto proxy configuration

[PyROm]

The .pac file, or .wpad file is normally specified in either GPO or a DHCP option (this can be set at server or scope level) , however it can also be specified in a DNS entry for the domain (wpad.domainname.sch.uk) however this method is depreciated. On top of this, as the computer does not know how to use the proxy yet, the computer has to be able to reach the .pac or .wpad file without going through the proxy (it looks like your school is setup to allow google through without going through the proxy, the .pac/.wpad file would be setup in the same way). Changing the subnet may mean that the exception to allow access to the .pac file no longer works (ie. the rule specifies a subnet) or that the server that hosts the .pac file (if internal) is not listening for requests coming in on that subnet (the .pac and .wpad are stored on a web server). Edited September 7, 2020 by PyROm