Skip to main content
Jamf Nation, hosted by Jamf, is a knowledgeable community of Apple-focused admins and Jamf users. If you like what you see, join us in person at the ninth annual Jamf Nation User Conference (JNUC) this October for three days of learning, laughter and IT love.

Proxy PAC Fallback

In Jamf Pro we have the ability to set proxy setting with Configuration Profiles. However, Jamf Pro leaves out the setting to allow fallback of the PAC file if it's not reachable. Since that setting is not available we are forced to use custom settings.

It would be great to see Jamf add in this ability to mirror Apples abilities.

Order by:

Posted: by smvasallo

What custom settings are you using now as a work around? we are having the hardest time getting this to work for us off network.


Posted: by jtarantino

You can actually import a global proxy profile in Jamf with the 'fallback' flag (<FallBackAllowed>). JSS will preserve this flag even when editing the profile.

But effectively adding the option in the interface seems a must have.

I give an example why this fallback flag is mandatory for Internet-exposed JSS or Jamf Cloud :
- Computer enrolls from Internet (DEP or invitation)
- The configuration profiles install
- Once 'Proxy' payload is applied the http or socks proxy becomes mandatory and subsequent traffic is dropped
- Enrollment fails to complete


Posted: by jtarantino

Addendum : another missing option in proxy payload is the ability to use captive Wifi portals as a exception (option available in iPCU).


Jamf wants to know how you would organize content on Jamf Nation.