This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

UTM WPAD bring Edge to freeze since Win10 Threshold 2 Upgrade / TMG doesn't

Hi.
We have installed the UTM version 9.351-3 with an active web protection. (Should replace the old TMG)
Now, after upgrade Win10 to Win10 Threshold 2, the Edge browser hang/freeze on many websites.
If we use the old ISA with wpad, edge works fine.
If we use the UTM with wpad, Edge freeze since Threshold 2.
If we use the UTM with the manual proxy settings, also everthing works fine.

Do somebody know what is wrong with our wpad script?

Here is it:

function FindProxyForURL(url, host) {
//Don't proxy connections to the UTM web interface
if (shExpMatch(url, "https://${asg_hostname}*")) return "DIRECT";
if (shExpMatch(url, "https://" + dnsResolve(host) + "*")) return "DIRECT";
//Exclude non-fqdn hosts from being proxied
if (isPlainHostName(host)) return "DIRECT";
//Don't proxy connections to the exempted URL matches
if (shExpMatch(url, "*.local/*")) return "DIRECT";
if (shExpMatch(url, "*xx.intern*")) return "DIRECT";
if (shExpMatch(url, "*xx.xx.de*")) return "DIRECT";
 --- 7 more lines like this ---
if (isInNet(dnsResolve(host), "127.0.0.0", "255.0.0.0")) return "DIRECT";
if (isInNet(dnsResolve(host), "xxx.xx.xx.0", "255.255.0.0")) return "DIRECT";
if (isInNet(dnsResolve(host), "xxx.xx.xx.0", "255.255.255.224")) return "DIRECT";
if (isInNet(dnsResolve(host), "xxx.xx.xx.32", "255.255.255.224")) return "DIRECT";
 --- 36 more lines like this ---
return "PROXY ${asg_hostname}:8080";
}

Thank you for help!



This thread was automatically locked due to age.
  • Wir haben das gleiche Problem.....Gibts keine Lösung?

    We have the same problem.....is there no solution?

  • An den Anfang vom WPAD Script (2. Zeile) bitte das einfügen:

    var resolved_IP = dnsResolve(host);

     

    Nachfolgend im WPAD Script diese Einträge:

    if (isInNet(dnsResolve(host), "x.x.x.x", "x.x.x.x")) return "DIRECT";

    durch das austauschen:

    if (isInNet(resolved_IP, "x.x.x.x", "x.x.x.x")) return "DIRECT";

     

    Sozusagen wird das "dnsResolve(host)" durch die Variable, die man am Anfang setzt ausgetauscht.

     

    Dann hat man nur noch 2-5 Sekunden teilweise einen Hänger, anstatt, dass es komplett hängt.

     

    Scheinbar hat Windows 10 derzeit "wieder", nachdem es schon gelöst wurde, einen Fehler beim Verarbeiten von dem "dnsResolve(host)".

  • Hallo
    Danke für deine schnelle Antwort. Das habe ich schon erfolglos getestet.

    Bei uns hängt EDGE sogar bei einer rudimentären WPAD.dat mit nur 3 Zeilen.......und das bis zu ner Minute.

    Hier mal meine WPAD.dat

    // wpad.dat Proxy Einstellungen by G.Saam 07.02.2017
    function FindProxyForURL(url,host) {
    var resolved_IP = resolved_IP;
    url = url.toLowerCase();
    host = host.toLowerCase();
     
    // lokale Hostnames Konfiguration
     if (dnsDomainIs(host, ".DOMAIN1.local"))
            return "DIRECT";
     if (dnsDomainIs(host, ".DOMAIN4.de"))
            return "DIRECT";

     if (dnsDomainIs(host, ".DOMAIN3.de"))
            return "DIRECT";
    // lokale Netze ohne Proxy:
        if (isPlainHostName(host) ||
     isInNet(host, "10.0.0.0",  "255.0.0.0") ||
            isInNet(host, "172.16.0.0",  "255.255.0.0") ||
     isInNet(host, "172.17.0.0",  "255.255.0.0") ||
            isInNet(host, "172.18.0.0",  "255.255.0.0") ||
     isInNet(host, "172.21.0.0",  "255.255.0.0") ||
     isInNet(host, "172.26.0.0",  "255.255.0.0") ||
     isInNet(host, "172.30.0.0",  "255.255.0.0") ||
            isInNet(host, "192.168.0.0",  "255.255.0.0") ||
            isInNet(host, "127.0.0.0", "255.255.255.0"))
            return "DIRECT";

     // kein Proxy für einen Host
        if (isInNet(resolved_IP, "193.188.250.162", "255.255.255.255")) // dakota
        if (isInNet(resolved_IP, "85.214.9.45", "255.255.255.255")) // bewerberonline
        if (isInNet(resolved_IP, "159.154.8.56", "255.255.255.255")) // elster
        if (isInNet(resolved_IP, "159.154.8.39", "255.255.255.255")) // elster service
         return "DIRECT";
     
    //Test Eicar.Org Virenfile und
    // Besondere hosts gehen nicht über den Proxy (= Ausnahmenliste)
    // if (shExpMatch(host, "*.eicar.org")) return "DIRECT";
    if (shExpMatch(host, "*.s-hbci.de")) return "DIRECT";
    if (shExpMatch(host, "*.fiducia.de")) return "DIRECT";
    if (shExpMatch(host, "*.sfirm.de")) return "DIRECT";
    if (shExpMatch(host, "*.microsoft.com")) return "DIRECT";
    if (shExpMatch(host, "*.elster.de")) return "DIRECT";
    if (shExpMatch(host, "*.lohnkonstanten.de")) return "DIRECT";
    if (shExpMatch(host, "*.gkvnet.de")) return "DIRECT";
    if (shExpMatch(host, "*.gkvnet-ag.de")) return "DIRECT";
    if (shExpMatch(host, "*.sage.de")) return "DIRECT";
    if (shExpMatch(host, "*.hrms-online.de")) return "DIRECT";
    if (shExpMatch(host, "*.svnet-online.de")) return "DIRECT";
    if (shExpMatch(host, "*.itsg.de")) return "DIRECT";
    if (shExpMatch(host, "*.eservice-drv.de")) return "DIRECT";
    if (shExpMatch(host, "*.windowsupdate.com")) return "DIRECT";
    if (shExpMatch(host, "*.java.com")) return "DIRECT";
    if (shExpMatch(host, "*.geotrust.com")) return "DIRECT";
    if (shExpMatch(host, "*.oracle.com")) return "DIRECT";
    if (shExpMatch(host, "*.1and1.eu")) return "DIRECT";
    if (shExpMatch(host, "*.digicert.com")) return "DIRECT";
    if (shExpMatch(host, "*.teamviewer.com")) return "DIRECT";
    if (shExpMatch(host, "*.teamviewer.de")) return "DIRECT";
    if (shExpMatch(host, "*.anydesk.com")) return "DIRECT";
    if (shExpMatch(host, "*.anydesk.de")) return "DIRECT";
    if (shExpMatch(host, "*.apple.com")) return "DIRECT";
    if (shExpMatch(host, "*.adobe.com")) return "DIRECT";
    if (shExpMatch(host, "*.strato.de")) return "DIRECT";
    if (shExpMatch(host, "*.zema-online.de")) return "DIRECT";
    if (shExpMatch(host, "*.office365.com")) return "DIRECT";
    if (shExpMatch(host, "*.zemaonline.de")) return "DIRECT";
    if (shExpMatch(host, "*.d-trust.de")) return "DIRECT";
    if (shExpMatch(host, "*.versorgerungskammer.de")) return "DIRECT";
    if (shExpMatch(host, "*.whatsapp.com")) return "DIRECT";
    if (shExpMatch(host, "*.ecratum.net")) return "DIRECT";
    if (shExpMatch(host, "*.intercom.io")) return "DIRECT";
    if (shExpMatch(host, "*.cloudfiles.net")) return "DIRECT";
    if (shExpMatch(host, "*.general-overnight.com")) return "DIRECT";
    if (shExpMatch(host, "*.verisign.net")) return "DIRECT";
    if (shExpMatch(host, "*.dguv.de")) return "DIRECT";
    if (shExpMatch(host, "*.asphr.de")) return "DIRECT";
    if (shExpMatch(host, "*.webex.com")) return "DIRECT";
    if (shExpMatch(host, "*.esko.com")) return "DIRECT";
    if (shExpMatch(host, "*.adobe.com"))  return "DIRECT";
    if (shExpMatch(host, "*.haveldata.de"))  return "DIRECT";
    if (shExpMatch(host, "*.perfidia.de"))  return "DIRECT";
    if (shExpMatch(host, "*.natan.zone"))  return "DIRECT";
    if (shExpMatch(host, "*.gkv-kommunikationsserver.de"))  return "DIRECT";
    if (shExpMatch(host, "*.atosorigin.de"))  return "DIRECT";
    if (shExpMatch(host, "*.estatistik.de"))  return "DIRECT";
    if (shExpMatch(host, "*.dguv.de"))  return "DIRECT";
    if (shExpMatch(host, "*.bfinv.de"))  return "DIRECT";
    if (shExpMatch(host, "*.bff-online.de"))  return "DIRECT";
    if (shExpMatch(host, "*.lync.com"))  return "DIRECT";
    if (shExpMatch(host, "*.skype.com"))  return "DIRECT";
    if (shExpMatch(host, "*.sa.symcb.com"))  return "DIRECT";
    if (shExpMatch(host, "*.onmicrosoft.com"))  return "DIRECT";
    if (shExpMatch(host, "*.microsoftonline.com"))  return "DIRECT";
    if (shExpMatch(host, "*.microsoftonline-p.com"))  return "DIRECT";
    if (shExpMatch(host, "*.sharepoint.com"))  return "DIRECT";
    if (shExpMatch(host, "*.office.com"))  return "DIRECT";
    if (shExpMatch(host, "*.office.net"))  return "DIRECT";
    if (shExpMatch(host, "*.sophos.com"))  return "DIRECT";
    if (shExpMatch(host, "*.bing.com"))  return "DIRECT";
     
     

     return "PROXY DOMAIN1fw.DOMAIN1.local:3128";
    }