[isalist] Re: Mobile users
- From: "Mayo, Bill" <bemayo@xxxxxxxxxxxxx>
- To: <isalist@xxxxxxxxxxxxx>
- Date: Thu, 15 Feb 2007 11:05:27 -0500
http://www.ISAserver.org
-------------------------------------------------------
That helps a whole lot. Thanks again, Jim!
Bill Mayo
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Jim Harrison
Sent: Wednesday, February 14, 2007 5:06 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Mobile users
http://www.ISAserver.org
-------------------------------------------------------
"auto-discover" == "Automatically detect settings"
"config URL" == "Use automatic configuration script" (BTW, this can also
be a local file - it's how I debug wpad scripts) "static proxy" == "Use
a proxy server.."
As a rule, IE will try each option in turn until one succeeds or they
all fail.
If they all fail, IE will *usually* "go direct", but this has not proven
to be a consistent behavior.
For cases 1) and 2), auto-proxy in the LAN settings will allow IE to
detect any proxy if the local environment supports WPAD. Entering
anything at all in "config URL" and "static proxy" will only delay IE
"going direct" in these cases.
For case 3), you should make any proxy settings in the dial-up
connection settings - NOT the LAN settings. This allows IE to use the
settings most appropriate for the connection being used.
Jim
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Mayo, Bill
Sent: Wednesday, February 14, 2007 1:24 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Mobile users
http://www.ISAserver.org
-------------------------------------------------------
Jim, thanks very much for the response and sorry for not including more
info there. There are a few possible scenarios: 1) they are using a
cellular modem and connected to the internet, 2) they are at a hotel or
other location where they are connected to the internet/foreign network
via 802.11 or local ethernet connection, and 3) either 1 or 2 and using
a (Cisco) VPN connection back to our network.
Do I understand correctly that if I use the "auto-proxy URL" setting
(which points to the wpad file) and IE cannot find the URL provided,
that they will be able to get a connection? (Sorry, a bit unclear on
which settings "config URL" and "use this proxy" referenced in GPO/IE,
as the wording seems to be a bit different between the 2.)
Bill Mayo
-----Original Message-----
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Jim Harrison
Sent: Wednesday, February 14, 2007 3:47 PM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Re: Mobile users
You didn't say exactly how these "mobile users" access the LAN when
they're "mobile".
Is there a VPN connection involved?
In general, it's best to let the browser (or any proxy-aware app such as
WinMedia Player) self-discover the local proxy (auto-discover).
In this case, if the app can't find a proxy, it drops to "direct"
operation.
If you enter all three, then IE will go from "auto-detect to config URL"
to "use this proxy", where it will ultimately fail to access any web
site.
From: isalist-bounce@xxxxxxxxxxxxx [mailto:isalist-bounce@xxxxxxxxxxxxx]
On Behalf Of Mayo, Bill
Sent: Wednesday, February 14, 2007 11:35 AM
To: isalist@xxxxxxxxxxxxx
Subject: [isalist] Mobile users
I am trying to make some updates to our web proxy configuration in order
to prevent our staff from making changes. The concern I have is how
this will effect our mobile staff who are sometimes connected to our
network and other times connected through some ISP (e.g. cellular modem
or wireless access point). Today, our group policy is set to allow them
to clear the "use proxy server" checkbox, which they do when they are
not attached to our network. Presently, the "automatically detect
settings" is turned off and the proxy server address is pre-populated
via group policy.
I am planning to adjust the policy to use DHCP/DNS/Wpad as is explained
quite nicely at
http://www.isaserver.org/tutorials/Load-Balancing-Web-Proxy-Clients-With
-ISA-Server-2004-Standard-Edition-Part2.html
<http://www.isaserver.org/tutorials/Load-Balancing-Web-Proxy-Clients-Wit
h-ISA-Server-2004-Standard-Edition-Part2.html> (thanks, Tom!). What I
am unclear on, though, is if I set the policy up to use "automatically
detect settings", enable automatic configuration, and enter the
auto-proxy URL, how will my mobile users be affected? In the absence of
a DHCP/DNS record, will IE just happily go along with no proxy, or will
it cause it to break? Should entering the auto-proxy URL be something
that is included or not for these particular users?
I have attempted to find this information online, but if I happen to
have missed something, I would gladly accept any pointers to any
articles that would clarify. Otherwise, I appreciate any input that I
receive.
Bill Mayo
Pitt County MIS
All mail to and from this domain is GFI-scanned.
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
All mail to and from this domain is GFI-scanned.
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials:
http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
------------------------------------------------------
List Archives: //www.freelists.org/archives/isalist/
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server Articles and Tutorials: http://www.isaserver.org/articles_tutorials/
ISA Server Blogs: http://blogs.isaserver.org/
------------------------------------------------------
Visit TechGenix.com for more information about our other sites:
http://www.techgenix.com
------------------------------------------------------
To unsubscribe visit http://www.isaserver.org/pages/isalist.asp
Report abuse to listadmin@xxxxxxxxxxxxx
Other related posts:
