Network Proxy Configuration MDM settings for Apple devices
You can configure Network Proxy Configuration payload settings for users of a Mac enrolled in a mobile device management (MDM) solution. Network Proxy Configuration settings permit the device to use a proxy server for access to websites.
Supported payload identifier: com.apple.SystemConfiguration
Supported operating systems and channels: macOS device
Supported enrolment methods: Device Enrolment, Automated Device Enrolment.
Duplicates allowed: False — only one Network Proxy Configuration payload can be delivered to a device.
You can use the settings in the table below with the Network Proxy Configuration payload.
Setting | Description | Required | |||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
Hostname | The IP address or fully qualified domain name (FQDN) of the proxy server. Used for manual configuration. | Yes | |||||||||
Port | The port number of the proxy server. Used for manual configuration. | Yes | |||||||||
Account username | The user name for the manual proxy connection. | No | |||||||||
Account password | The password for the manual proxy connection. | No | |||||||||
Enable Automatic Proxy Configuration | Enable Automatic Proxy Configuration if you’re using a proxy auto-config (PAC) file. Enter the address of the PAC file in the URL field. For example, https://www.betterbag.com/filename.pac. | No | |||||||||
PAC fallback | Specify whether to allow the device to connect to websites if the proxy is unreachable. | No | |||||||||
Web Proxy Auto-Discovery (WPAD) configuration | Choose Automatic from the pop-up menu. If you leave the Proxy Server URL field empty, the device requests the wpad.dat file using DHCP (using a 252 entry) or DNS (using an A Record with the name WPAD). | No | |||||||||
Proxy type | Select the types of proxies to be used:
| Yes | |||||||||
Proxy exceptions | Choose to bypass proxy settings for specific computers on the internet (hosts) and segments of the internet (domains) by adding the address of the host or domain in the “Bypass proxy settings for these Hosts & Domains” field. This might be useful if you want to make sure you’re receiving information directly from the host or domain and not information that’s cached on the proxy server.
| No | |||||||||
Passive FTP mode (PASV) | Enable FTP passive mode (PASV). | No | |||||||||
Note: Each MDM vendor implements these settings differently. To learn how Network Proxy Configuration settings are applied to your devices, consult your MDM vendor’s documentation.