Artica Wiki

Proxy Pac Service

A Proxy Auto-Config (PAC) file defines how web browsers and other user agents can automatically choose the appropriate proxy server (access method) for fetching a given URL.

Overview

A PAC file contains a JavaScript function “FindProxyForURL(url, host)”.
This function returns a string with one or more access method specifications.
These specifications cause the user agent to use a particular proxy server or to connect directly.
Multiple specifications provide a fall-back when a proxy fails to respond.
The browser fetches this PAC file before requesting other URLs.
The URL of the PAC file is either configured manually or determined automatically by the Web Proxy Autodiscovery Protocol (WPAD).

Artica is able to provide and generates on-the-fly a proxy.pac file for your Network.
It extends native proxy.pac support with dynamic configuration capabilities.

Artica generates and serves a built-in web server that provides enhanced proxy.pac functionality. Unlike traditional static PAC files, Artica dynamically delivers multiple versions of the configuration script based on:

This allows administrators to tailor proxy behavior in real time, enabling advanced use cases like:

  1. Assigning different proxy rules for internal vs. external users
  2. Applying specific routing logic for mobile devices or certain browsers
  3. Enforcing policies per network segment or site

With Artica, the PAC file becomes a flexible and intelligent policy engine, adapting automatically to the context of each request.

Setup 

Proxy Pac Rules

Objects:

Deploy Your Proxy Pac

To deploy your proxy.pac you have 3 ways.

  1. Using Active Directory
    Active Directory can push via the GPO system proxy parameters to any computer of the domain.
     
  2. Using DHCP option:
    The DHCP option push the proxy.pac parametres inside the DHCP packets. Any computer that use the DHCP is able to retrieve the Proxy.pac.
     
  3. Using Web Proxy Auto-Discovery Protocol:
    If browsers have auto-detect feature enabled, browsers automatically try to resolve a specific hostname called “wpad” If the wpad hostname can be resolved, the browser will retrieve the proxy.pac using HTTP.

Monitor the service

Import/export

TroubleShooting