Forum Discussion
Edge Application Guard Proxy via PAC file
MicrosoftJeff-678 Hi! The ApplicationGuardContainerProxy GPO is brand new (not in Stable channel yet), so the documentation for it is still being worked on.
For a PAC script, that GPO should be set to something like the following: {"ProxyMode":"pac_script","ProxyPacUrl":"http://example.com/wdag_pac_script.js"} (including the braces).
Note this policy is only if you want a *different* PAC script for WDAG (vs the host). If this policy isn't set, WDAG will pick up and use whatever proxy is configured for the host.
Also, if the PAC script resolves to a proxy, it needs to resolve to a named proxy (not an IP) -- this applies with or without the ApplicationGuardContainerProxy policy configured.
Yes,
I have have that Syntax in my GPO "{"ProxyMode":"pac_script","ProxyPacUrl":"https://gcc02.safelinks.protection.outlook.com/?url=http%3A%2F%2Fexample.com%2Fwdag_pac_script.js&data=02%7C01%7CBennyhoffJ%40cityofmerced.org%7C34cbb3d898f34a84b39208d7f68ae584%7Cc9671a04843b43d0bbb4ffb23b7fb0bf%7C0%7C0%7C637248948726680238&sdata=C3uUmul2GEaRFTOQ6%2FYnn%2BsxWrFtEB9059zoG9DtdD0%3D&reserved=0"}
When you look at edge://application-guard-internals#host it shows it using a PAC file :
{"pac_url" : "http://path-to-pac-file.pac/" }
They should clean this up so it show the same Syntax in both places.
I understand this GPO is only if you don't want to pass the host proxy settings. I would be fine pass the host settings, but it doesn't seem to work. And this GPO doesn't seem to work, even though it shows the proxy in the edge://application-guard-internals#host.
There is something going wrong and i need more log insight?