Skip to main content
null0
New Member
February 7, 2021
Question

PAC file configuration loss

  • February 7, 2021
  • 5 replies
  • 6849 views

Hi There,

 

I am experiencing this weird issue where my PAC file which was configured asper my requirements has lost all its custom configs and changed to default by its own.  I have checked the logs but found nothing.

 

This has happened multiple times now. I am using FortiOS 6.2

 

Thanks for your help.

Null0 

5 replies

emnoc
New Member
February 8, 2021

How are you delivering the pac file to your hosts? And is it just one or all of your hosts?  If you're doing explicit web-proxy,  are you using the FortiGate for the delivery of the pac file ?

 

e.g 

 

    show  web-proxy explicit | grep -f pac

 

I would start by looking at that cfg and figuring out how you are delivered of the pac file. You haven't given us enough details in order to help.

 

Ken Felix

 

null0
null0Author
New Member
February 9, 2021

Hello Ken,

 

user machines are managed by group policy - the proxy setting is enabled and set to http://proxy.aaa.com:8080/proxy.pac     aaa.com is an example

 

http://proxy.aaa.com is the FQDN of the Fortigate Firewall and the explicit proxy is enabled on the Inside and DMZ Interfaces

 

Thanks

Null0

emnoc
New Member
February 9, 2021

Then it sounds like your GPO is not working or something is trampling the proxyaccesscontrols. IIRC gpo can be trump by local machine policy but I'm not a windows Admin expert. I would look at group-policy and machine  or user policies 1st and if you have two or more GPO colliding in your ms-domain.

 

The fortigate does NOT sound like the root of your issues fwiw.

 

if all else fails load the pac manually 

 

i.e 

 

copy the pac.file to your user directory and in your browser-proxy-setting for pac location URL

 

e.g

 

   file:///C:\Users\kenfelix\pac.file

 

if that stays, than you know the issues and the path to diagnose.

 

Ken Felix

Thought Leadership Security Summit. Outpace New Threats with AI - enhanced defense. Tuesday, Septmeber 15, 8:30 AM - 2:30 PM PT. The Golf Club at Newcastle, WA.
Virtual event | September 2026. SASE summit. The age of autonomous trust. Register here!