GSA proxy configuration requirements
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/entra-docs · commit 9fab986 · +17 −11 lines · also on GitHub
11
---
2
−title: Learn about Proxy Automatic Configuration (PAC)
3
−description: Learn about Explicit Forward Proxy PAC file concepts
2
+title: Proxy Automatic Configuration (PAC)
3
+description: Learn about Explicit Forward Proxy PAC file concepts.
44
ms.topic: concept-article
55
ms.date: 04/06/2026
66
ms.author: alexpav
⋯ 1 unchanged line
88
ms.reviewer:
99
---
1010
11
−# Introduction to Proxy Automatic Configuration (PAC) files
11
+# Introduction to proxy automatic configuration (PAC) files
1212
13
−A PAC file is a mechanism used to automatically determine which proxy server a web browser or application should use for a given request. PAC files are an integral part of Explicit Forward Proxy configuration, enabling flexible and dynamic traffic steering decisions. In the context of Global Secure Access, PAC files are similar to the traffic forwarding policies of the GSA client.
13
+A proxy automatic configuration (PAC) file is a mechanism for automatically determining which proxy server a web browser or application should use for a request. PAC files are an integral part of Explicit Forward Proxy configuration, where they enable flexible and dynamic traffic steering decisions. In the context of Global Secure Access, PAC files are similar to the traffic forwarding policies of the Global Secure Access client.
1414
1515
## How PAC files work
1616
17
−Once configured, PAC files operate by providing browsers with a JavaScript function called **FindProxyForURL**. When a browser requests a resource, it calls this function, which then evaluates conditions---such as destination address, protocol, or hostname---and returns a directive indicating which proxy (or proxies) to use, or whether to connect directly (bypass). This approach allows for granular control over network traffic, enabling you to define routing logic tailored to your specific needs.
17
+After you configure PAC files, they operate by providing browsers with a JavaScript function called `FindProxyForURL`. When a browser requests a resource, it calls this function. The function then evaluates conditions such as destination address, protocol, or host name. The function returns a directive that indicates which proxy (or proxies) to use, or whether to connect directly (bypass).
1818
19
+This approach allows for granular control over network traffic, so that you can define routing logic that's tailored to your specific needs.
20
+
1921
## PAC file structure and syntax
2022
21
−The core of a PAC file is the JavaScript block that defines the **FindProxyForURL(url, host)** function. Within this function, you can use JavaScript constructs like **if** statements, regular expressions, and built-in helper functions (e.g., **dnsDomainIs**, **isInNet**, **shExpMatch**) to determine proxy behavior. The function returns a string specifying proxy settings, such as **\"PROXY *tenantID*.internet.efp.globalsecureaccess.microsoft.com:443\"** for proxy use or **\"DIRECT\"** for direct connections.
23
+The core of a PAC file is the JavaScript block that defines the `FindProxyForURL(url, host)` function. Within this function, you can use JavaScript constructs like `if` statements, regular expressions, and built-in helper functions (for example, `dnsDomainIs`, `isInNet`, `shExpMatch`) to determine proxy behavior. The function returns a string that specifies proxy settings, such as `"PROXY <tenantID>.internet.efp.globalsecureaccess.microsoft.com:443\"` for proxy use or `"DIRECT"` for direct connections.
2224
23
−The example PAC file snippet shows a configuration where Entra ID login is allowed to be accessed directly (required for EFP for Internet Access), while all other URLs are accessed via EFP:
25
+The following example PAC file snippet shows a configuration where a Microsoft Entra ID sign-in is allowed to be accessed directly (required for Explicit Forward Proxy for Internet Access), while all other URLs are accessed via Explicit Forward Proxy:
2426
2527
```javascript
2628
function FindProxyForURL(url, host) {
⋯ 11 unchanged lines
3840
3941
## Applying PAC file settings to browsers
4042
41
−The mechanism for applying PAC file settings varies depending on device management and browser type. On managed devices, such as those governed by browser policy or enterprise mobility management, you can distribute PAC file URLs or content through centralized configuration tools. For unmanaged devices, you can instruct end users to manually enter the PAC file location in browser settings or rely on network-provided configuration (such as DHCP or WPAD).
43
+The mechanism for applying PAC file settings varies depending on device management and browser type.
4244
43
−## Next steps
45
+On managed devices, such as those governed by browser policy or enterprise mobility management, you can distribute PAC file URLs or content through centralized configuration tools.
4446
45
−[Learn How to Configure Explicit Forward Proxy](how-to-configure-explicit-forward-proxy.md)
46
−[Configure Microsoft Edge MAM policy for explicit forward proxy](how-to-configure-explicit-forward-proxy-intune-policy.md)
47
+For unmanaged devices, you can instruct users to manually enter the PAC file location in browser settings or rely on network-provided configuration. A network-provided configuration might be Dynamic Host Configuration Protocol (DHCP) or Web Proxy Auto-Discovery (WPAD).
48
+
49
+## Related content
50
+
51
+- [Learn how to configure Explicit Forward Proxy](how-to-configure-explicit-forward-proxy.md)
52
+- [Learn how to configure a Microsoft Edge mobile application management (MAM) policy for Explicit Forward Proxy](how-to-configure-explicit-forward-proxy-intune-policy.md)
Microsoft's Markdown source from MicrosoftDocs/entra-docs, © Microsoft Corporation, under MIT. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 01:59 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.