Proxy exceptions on safari / iPhone-iPad config utility

Question

Level 1

0 points

Proxy exceptions on safari / iPhone-iPad config utility

Is it possible to setup an 'exception to proxy' in either Safari or via the iPhone-iPad configuration Utility?

I can have either everything proxied or nothing proxied using the wi-fi networks setting for my connection, unfortunately as this is a corporate connection, I have to keep switching the http proxy setting from manual to off.

iPad / iPhone, iOS 4, *

Posted on Jan 13, 2011 2:12 PM

Reply

Answer 1

smiggs69 Author

Level 1

0 points

Jan 14, 2011 2:59 AM in response to smiggs69

Ok, so after some digging it looks like that its not yet possible to do this due to the iOS.

From an app point of view, the built-in WebKit component forces you to use the proxy settings that are configured in the network settings.

Can anyone confirm this?

Reply

Answer 2

Jan 14, 2011 11:38 AM in response to smiggs69

I frankly wish it was possible to setup proxy using IPCU( while setting up the specific wi-fi network)..it's a hassle to get the technician deploying the device to have to manually set it up later. Do you have both a proxied and an open wi-fi network at you organization?

Reply

Answer 3

smiggs69 Author

Level 1

0 points

Jan 14, 2011 12:47 PM in response to Bonesaw1962

Im using certificates to authenticate wireless connectivity onto our data lan. To get to the outside world I need to authenticate via ISA server manually.

The problem is that proxy authentication is either on or off via the iphone/ipad network config, which means intranet or internet not both together.

In a desktop browser client, the proxy exception option would do the trick.

Reply

Answer 4

smiggs69 Author

Level 1

0 points

Feb 11, 2011 3:23 AM in response to smiggs69

*Update*
After doing some digging it turns out that proxy exceptions are only one way of doing this.
I found a useful doc that explains how to utilise PAC (proxy auto-config) file.

http://www.craigjconsulting.com/proxypac.html

Basically you can set your "HTTP Proxy" setting within your wireless config to automatic and point the device to a PAC file.

The PAC file I'm using is modelled on this:-

function FindProxyForURL(url, host)
{
// variable strings to return
var proxy_yes = "PROXY 192.168.1.1:8080";
var proxy_no = "DIRECT";
if (shExpMatch(url, "http://www.mycompanywebsite.com*")) { return proxy_no; }
if (shExpMatch(url, "http://www.myotherwebsite.com*")) { return proxy_no; }
if (shExpMatch(url, "http://www.my3rdlocalsite.com*")) { return proxy_no; }
// Proxy anything else
return proxy_yes;
}

Job done!

Reply

Answer 5

smiggs69 Author

Level 1

0 points

Feb 11, 2011 3:24 AM in response to smiggs69

Done!

Reply

Answer 6

Mar 7, 2011 12:50 PM in response to smiggs69

Could you outline how did you accomplished this task? I have created a PROXY.pac but I cannot see anywhere in iPCU where I can add it to a payload for the WiFi network to use.

Reply

Answer 7

Rascally

Level 1

4 points

Apr 7, 2011 10:32 AM in response to smiggs69

Maybe this is a dumb question, but can this PAC solution be applied to iPhone users?

We have iPhones connected to our office Wi-fi, and it workds great, except for access to local resources. We's like to access our local mail server, but the Proxy sends this traffic outbound.

Help?

thanks

Randy

Reply

Answer 8

smiggs69 Author

Level 1

0 points

May 9, 2011 2:39 PM in response to Jonson Tsai

Jonson,

The setting is not in the configuration utility, it is manually setup in your wifi-networks settings.

At the bottom section of your network setup

Settings -> Wi-Fi -><select your SSID>
Set the HTTP Proxy to Auto and select the path to your PAC file.

Reply

Answer 9

smiggs69 Author

Level 1

0 points

May 9, 2011 2:42 PM in response to Rascally

Randy,

This works for iphones as well, any browser that can see the PAC file can use the rules you add.

manually setup in your wifi-networks settings.

At the bottom section of your network setup

Settings -> Wi-Fi -><select your SSID>
Set the HTTP Proxy to Auto and select the path to your PAC file.

Set proxy_no for your local mail server as per the code snippet above.

Reply

Answer 10

jagdmc

Level 1

0 points

Jun 7, 2011 11:34 AM in response to smiggs69

This PAC file is still being ignored by some Apps used at the office for local URLs.

Is there any way around this??

Reply

Answer 11

smiggs69 Author

Level 1

0 points

Jun 8, 2011 8:05 AM in response to jagdmc

Hi Jagdmc,

Can you advise on which apps are not working? I.E. native apps such as app store, facebook etc or your internal apps such as web mail, intranet apps?

Cheers.

Reply

Answer 12

jagdmc

Level 1

0 points

Jun 8, 2011 8:35 AM in response to smiggs69

I'm specifically talking about SAP's BusinessObjects Explorer.

It can only be used if I don't use Porxy Exceptions list... I don't know a work-around to this problem

Reply

Answer 13

Jul 29, 2011 7:49 AM in response to smiggs69

Due to the absence of proxy exception, I spent hours trying to use proxy.pac. I set up an IIS server, set up a proxy pac. For Safari and iTunes worked fine, however for mail and other applications (SoundHound operates etc ...) did not work.

My environment has an aggravating factor, because the proxy requires authentication and the proxy does not support it. Every time I open Safari, it requires re-authentication to navigate.

I hope apple in iOS 5increase support services for corporate and implement NTLM , Kerberos TGT for single sign on.

If you guys got some information regarding, please let me know.

Reply

Answer 14

Sep 8, 2011 12:30 PM in response to Joao Campos

Joao Campos wrote:

I hope apple in iOS 5increase support services for corporate and implement NTLM , Kerberos TGT for single sign on.

If you guys got some information regarding, please let me know.

Here, here. Kerberos TGT is a must.

Reply

Answer 15

Feb 16, 2012 7:14 AM in response to smiggs69

Hi,

I know this is an old post but I hope you guys are still listening.

I have made my own proxy.pac but am struggling where to put it so the iPad has it to access.

Thanks

Arch

Reply