Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have recently setup a Squid proxy server for caching purposes and would like to start pointing my desktops and laptops to it.

My computers are running Windows XP with IE8 and Windows 7 with IE9.

share|improve this question
add comment

3 Answers

up vote 7 down vote accepted

In my experience there is not single way that will work reliably every time. You probably need to setup WPAD, and and also setup the policies for some machines that won't do WPAD.

Since your users have laptops, you almost certainly are going to want to have WPAD. IE, Firefox, Chrome, can all support this, even on non-windows operating systems.

You should probably set it up so you deliver the wpad infromation both via DHCP for your Windows boxes, and also setup the DNS method. Place the config at http://wpad.yourdomain.example.org/wpad.dat

Setting group policies as another method will help to, but you will almost certainly want to exclude your laptops, or they may not be able to use the Internet when they are outside of your network.

If your squid doesn't require authentication, and you don't mind either breaking SSL, or permitting out without going through the proxy, then the easiest way is to simply place squid in a location on your network where you can set it up in Interception mode. In this mode you don't have to set anything on the clients. They are forced through the proxy by the ACLs on your firewall/router.

share|improve this answer
    
Perhaps use a GPO to tell IE to automatically detect proxy? (I know that is default, but I may have messed with it on various computers, my bad ;-)) –  Corey Sep 10 '11 at 2:18
    
My 2¢ would be to avoid the DNS autodiscovery, especially on zones with dynamic updates enabled (and it's even blacklisted on 2008 DNS servers by default). Stick the proxy .dat/.pac file in a central location and point the clients to it via GPO, if you can. –  Shane Madden Sep 10 '11 at 7:56
    
Would the DHCP/DNS/WPAD option also take care of the Windows background updating? In other words, would it configure windows to use the proxy to download updates in the background? –  Corey Sep 13 '11 at 0:42
    
I believe Windows updates supports wpad, but I am not certain. We have generally setup a WSUS server on our networks to save bandwidth and give us control of what gets updated. –  Zoredache Sep 13 '11 at 1:25
add comment

You can configure proxy settings for Internet Explorer in the Internet Explorer group policy settings templates. They are found in the IEAK for each version of the browser available on the Microsoft download site.

share|improve this answer
add comment

The above are all great examples.

We use a different method in our office to catch all HTTP traffic. What kind of network equipment are you using? Squid supports WCCP, and network equipment like Cisco routers and firewalls (ASA, PIX), and other vendors too, also support it. This allows you to do a transparent proxy server, forcing all http traffic to be routed at the firewall level, rather than the client level. This works on all browsers, not just IE, because it's handled at the network level. An example setup is documented nicely here.

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.