ProxySG & Advanced Secure Gateway

 View Only
  • 1.  About pac file for faiover the proxies

    Posted Jul 14, 2020 11:37 AM
    Hi all,
             Our customer has requirement to use pac file for fail over traffic by following in this order:
             1. If proxy1 goes down fail over traffic to proxy 2
             2. If proxy1 and proxy2 go down, traffic direct to the internet
             
             Please recommend the properly pac file. 

    Best regards,
    Pongsatorn Laohavijitchan 
             





  • 2.  RE: About pac file for faiover the proxies

    Posted Jul 14, 2020 11:50 AM

    It's more of a networking thing that a PAC file thing. For example, in the PAC you can have it point to a VIP and have failover groups setup between your proxies (Master and Backup) when clients hit that VIP IP, they will be directed to the Master Proxy. I've setup our Failover group (good link below) and the proxies verify every 3 seconds if the other is up via multicast. 

    https://knowledge.broadcom.com/external/article/170518/failover-configuration-operation-and-tro.html




  • 3.  RE: About pac file for faiover the proxies

    Broadcom Employee
    Posted Jul 14, 2020 12:08 PM
    Hello,

    The PAC File configuration/troubleshooting is outside of Symantec Support scope !

    But based on a quick online search the answer is , you will need to add the second proxy in the same line where you have the first proxy, similar to bellow example:

    return "PROXY 4.5.6.7:8080; PROXY 7.8.9.10:8080";

    More information available online for example here : https://findproxyforurl.com/example-pac-file/

    I hope this helps.
    Slava V


  • 4.  RE: About pac file for faiover the proxies

    Posted Jul 14, 2020 12:16 PM
    Hi Slava,
             They using: return "PROXY proxy1.com:8080; PROXY proxy2.com:8080; DIRECT";
             The pac file work fine in the scenario proxy1.com goes down, traffic can go to proxy2.com. But the proxy1.com and proxy2.com go down, traffic can't direct to the internet.

    Best regards,
    Pongsatorn Laohavijitchan