Setting Up Autopilot to Work on a LAN with Zscaler Proxy
Question
Hi All,
Does anyone know how to get the autopilot to work on the LAN through a proxy that needs an agent and trusted cert? Proxy is zcaler. Thanks
Posted By Anonymous member in HTMD FB Group
Answers ( 2 )
Replied by Anonymous member
Simon Hardy, thanks a lot appreciate your help
Replied by Anonymous member
Simon Hardy is just wondering if it is “safer” for the security team to accept if we go down the unauthenticated route. But the downside is that we need to set a proxy at Oobe.
Replied by Rakib Rahman
Don’t worry; what’s the point of autopilot when everything is closed down?
Replied by Anonymous member
Rakib Rahman, I was just wondering how we’d build using the LAN then. Is there a way to set a proxy at Oobe?
Replied by Simon Hardy
You need to have unauthenticated access through the proxy for a number of MS URLs or a proxy bypass for those URLs. The zscaler Agent will also not set the WinHTTP proxy values so OOBE won’t use those even if you preloaded the agent etc. Been round this loop a few times.
Replied by Anonymous member
Simon Hardy https://learn.microsoft.com/…/networking-requirements
Are these 3 URLs ok with unauthenticated access? Then, do I need a script to add the proxy details at Oobe?
Replied by Simon Hardy
Anonymous members pretty much ALL the URLs in that article, including NTP and NSCI ones. You can only drive traffic via an agent-based proxy once the device is enrolled and the end user is logged in. You could use WPAD to set proxy details via DHCP, which was originally designed for on-premise proxy servers. The answer is that the device needs to be able to access ALL those URLs via the required port numbers without authentication. How you achieve that is down to your network design.