Request for configuration option to block Internet access when Proxy PAC file if unavailable or cannot be downloaded
Hello Everyone,
I am seeking assistance to configure Firefox browser so that internet access is blocked when the browser cannot download or access the proxy Auto-configuration (PAC) file. Our organisation enforces all web traffic through proxy servers defined by a PAC file. For compliance and security reasons, users should not have any direct internet access unless the browser is able to successfully retrieve and apply the PAC file.
The desired behaviour is:
1. Firefox attempts to download the PAC file from a defined URL. 2. If the PAC file is unreachable or fails to load (e.g., due to network restrictions or the device being outside the corporate network), Firefox should "fail closed" - meaning it should not allow any direct internet traffic. 3. This is effectively a "fail-block" mode: no fallback to direct connections, and no cached or bypassed proxy settings should allow internet browsing.
This behaviour is critical to prevent devices from accessing the internet without applying corporate proxy rules. I would like to know:
1/ Whether Firefox currently supports a setting or policy that enforces this fail-block condition when the PAC file is unavailable. 2/ If not, whether there are recommended configurations or enterprise policies (e.g., via `policies.json` or Group Policy templates) that could achieve equivalent enforcement.
Thank you for your assistance and guidance.
تمام جوابات (1)
Sorry for the lack of response. I've been thinking about this.
I researched this and I don't see any browsers having the ability to do this.
PAC files are cached though, so if it can't be obtained, it should use the cached version?