Question regarding "Directly Access Computers In the Specified Domains Tab"

Hi,

Some background information first...

  • We have a single TMG 2010 server functioning purely as a web proxy server (single NIC configuration).
  • We're using WPAD discovery through DHCP.
  • We're currently migrating between two forests (single domain in each forest), source is AD 2003, target is AD 2008.
  • There is a two-way trust between the forests.
  • TMG Server is in the source domain.
  • Both source and target domains are excluded from proxy (*.source.com; *.target.com as an example), and the option "Directly Access Computers In the Specified Domains Tab" is ticked.
  • Target domain has Exchange 2010 SP3

The problem...

A Windows 7 client in the target domain (with IE 9 and Outlook 2010), fails Autodiscovery testing when 'Automatically detect settings' is enabled within IE. The WPAD.dat file shows the exclusion for the *.target.com domain, but when I turn on logging in TMG for the client, I can still see that traffic to the AutoDiscovery server is being proxied (though it is being allowed by an 'internal traffic' rule).

If however, I untick 'Automatically Detect Settings' in IE, and configure it manually (same proxy server), including an entry for *.target.com within the ''Do not use proxy for address beginning with", then the autodiscovery test works fine.

Any help is appreciated!

Thanks in advance

Tony




June 28th, 2013 1:00pm

Hi,

Thank you for the post.

Please refer to this blog to configure multi-network WPAD: http://www.isaserver.org/blogs/pouseele/isa-corner/multi-networking-wpad-support-in-isa-2004-18.html

Regards,

Free Windows Admin Tool Kit Click here and download it now
July 2nd, 2013 8:43am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics