Views:
One of the ways you can forward web traffic from your organization's desktops and mobile devices to TMWS is by using a PAC file.
TMWS provides a default PAC file for desktops and mobile devices respectively. For details, see TMWS Default PAC File.
You can also add new PAC files for use by individuals or groups in your organization.
Set up and manage PAC files from the management console, which supports up to 10 files. After setting up all PAC files, start using them to forward traffic. For details, see Traffic Forwarding Using PAC Files.

Procedure

  1. Go to AdministrationSERVICE DEPLOYMENTPAC Files.
  2. Manage PAC files.
    Task
    Details
    View data in table columns
    • PAC File Name: File name, such as proxy.pac for the default PAC file to use on Windows and macOS
    • Description: Meaningful description to easily identify the PAC file
    • PAC File Location: Location of the PAC file (in URL format) on the TMWS system. For the default PAC file, the location is:
      • For an existing company using the global default PAC file: https://pac.iws-hybrid.trendmicro.com/proxy.pac
      • For an existing company using a company-specific default PAC files: https://pac-<region>.iws-hybrid.trendmicro.com/<Company ID>/proxy.pac and https://pac-<region>.iws-hybrid.trendmicro.com/<Company ID>/proxyforTMWSAgent.pac
      • For a newly provisioned company: https://pac-<region>.iws-hybrid.trendmicro.com/<Company ID>/proxy.pac and https://pac-<region>.iws-hybrid.trendmicro.com/<Company ID>/proxyforTMWSAgent.pac
      Note
      Note
      To enhance security, the HTTPS protocol is used to access new PAC files.
      For the existing PAC files with HTTP-based URLs, the URLs can still be used to access the PAC files. These URLs will automatically change to HTTPS-based after you modify the PAC files.
      Use this information when configuring the PAC file address on supported browsers. For details, see Browser Configuration .
      The PAC file selected for use on iOS/iPadOS devices will be automatically applied in the TMWS Agent app.
    Add/Edit a PAC file
    Click Add or select an existing PAC file under PAC File Name, and then specify the settings on the screen that appears. For details, see Configuring A PAC File.
    Delete a PAC file
    Select one or several PAC files (except the global default PAC file) and then click Delete.
    Before deleting a file, be sure that no client browsers are referencing the PAC file address (indicated in the PAC File Location column). Otherwise, the browsers will not be able to forward traffic to TMWS.
    Duplicate a PAC file
    This feature is a convenient way of adding a new PAC file with settings similar to an existing file.
    Select a PAC file and click Duplicate. Under PAC File Name, click the duplicate PAC file and then specify the settings on the screen that displays.
    Download a PAC file
    Right-click a link under PAC File Location and then save the file to your preferred location.
    Sort the PAC file information
    Sort the information in ascending or descending order in either of the following ways:
    • Click the title area of a column.
    • Click the up or down arrow at the right of the title area of a column.
    Search for a PAC file
    Type a PAC file name or description, or part of them in the Search text box.
    Note
    Note
    If there are many entries in the table, type some characters in the Search text box to narrow down the entries. As you type, the entries that match the characters you typed are displayed immediately. TMWS searches all cells in the table for matches.
  3. Turn on or off Bypass proxy for Microsoft 365 traffic.
    This option controls whether or not to use TMWS as the proxy server for Microsoft 365 traffic for the Optimize and Allow endpoints categorized by Microsoft.
    When this option is turned on, TMWS automatically generates script blocks in the existing and new PAC files, adding the corresponding Microsoft 365 domains as the hosts to skip. Modifying the script blocks may cause this function or even the entire PAC file not to work properly. Therefore, Trend Micro recommends not changing them.
    Note
    Note
    Make sure your firewall is configured to allow connectivity to the IP addresses behind these Microsoft 365 domains.