PAC Files

One of the ways you can forward web traffic from your organization's desktops and mobile devices to TMWS is by using a PAC file.

TMWS provides a default PAC file for desktops and mobile devices respectively. For details, see TMWS Default PAC File.

You can also add new PAC files for use by individuals or groups in your organization.

Set up and manage PAC files from the management console, which supports up to 10 files. After setting up all PAC files, start using them to forward traffic. For details, see Traffic Forwarding Using PAC Files.

  1. Go to Administration > SERVICE DEPLOYMENT > PAC Files.
  2. Manage PAC files.

    Task

    Details

    View data in table columns

    • PAC File Name: File name, such as proxy.pac for the default PAC file to use on Windows and macOS

    • Description: Meaningful description to easily identify the PAC file

    • PAC File Location: Location of the PAC file (in URL format) on the TMWS system. For the default PAC file, the location is:

      • For an existing company using the global default PAC file: http://pac.iws-hybrid.trendmicro.com/proxy.pac

      • For an existing company using a company-specific default PAC file: http://pac-<region>.iws-hybrid.trendmicro.com/<Company ID>/proxy.pac and http://pac-<region>.iws-hybrid.trendmicro.com/<Company ID>/proxyforTMWSAgent.pac

      • For a newly provisioned company: http://pac-<region>.iws-hybrid.trendmicro.com/<Company ID>/proxy.pac and http://pac-<region>.iws-hybrid.trendmicro.com/<Company ID>/proxyforTMWSAgent.pac

      Use this information when configuring the PAC file address on supported browsers. For example, in Internet Explorer, you would specify this information in Tools > Internet Options > Connections (tab) > LAN Settings (button) > Use automatic configuration script (check box) > Address (field) > .

      The PAC file selected for use on iOS/iPadOS devices will be automatically applied in the TMWS Agent app.

    Add/Edit a PAC file

    Click Add or select an existing PAC file under PAC File Name, and then specify the settings on the screen that appears. For details, see Configuring A PAC File.

    Delete a PAC file

    Select one or several PAC files (except the global default PAC file) and then click Delete.

    Before deleting a file, be sure that no client browsers are referencing the PAC file address (indicated in the PAC File Location column). Otherwise, the browsers will not be able to forward traffic to TMWS.

    Duplicate a PAC file

    This feature is a convenient way of adding a new PAC file with settings similar to an existing file.

    Select a PAC file and click Duplicate. Under PAC File Name, click the duplicate PAC file and then specify the settings on the screen that displays.

    Download a PAC file

    Right-click a link under PAC File Location and then save the file to your preferred location.

    Sort the PAC file information

    Sort the information in ascending or descending order in either of the following ways:

    • Click the title area of a column.

    • Click the up or down arrow at the right of the title area of a column.

    Search for a PAC file

    Type a PAC file name or description, or part of them in the Search text box.

    Note:

    If there are many entries in the table, type some characters in the Search text box to narrow down the entries. As you type, the entries that match the characters you typed are displayed immediately. TMWS searches all cells in the table for matches.

  3. Turn on or off Bypass proxy for Microsoft 365 traffic.

    This option controls whether or not to use TMWS as the proxy server for Microsoft 365 traffic for the Optimize and Allow endpoints categorized by Microsoft.

    When this option is turned on, TMWS automatically generates script blocks in the existing and new PAC files, adding the corresponding Microsoft 365 domains as the hosts to skip. Modifying the script blocks may cause this function or even the entire PAC file not to work properly. Therefore, Trend Micro recommends not changing them.

    Note:

    Make sure your firewall is configured to allow connectivity to the IP addresses behind these Microsoft 365 domains.