• Select a steering option.
  • To steer all web, onboarded SaaS, and private app traffic, select All website, cloud & private app traffic. The items included in this option depend on the subscriptions you have purchased for your environment.
  • To steer only onboarded SaaS and private app traffic, select Only cloud & private app traffic. When you choose this option, the Proxy Exclusion options are not visible.
• Configure the PAC file on the user devices using one of these options.
  • Click Copy PAC URL for the Lookout-hosted PAC file. The file provided by this URL differs according to the option you chose in the previous step.
  • Click Download PAC to host the PAC file in your network.
• Distribute the PAC URL (Lookout-hosted or self-hosted) to the user devices by pasting the PAC file URL or path in the Proxy Script Address field for your device OS.
  • Windows: Select System > Network & Internet > Proxy

  • MacOS: From the Apple menu, select System Settings > Network <applicable network location>

    You can configure PAC URL (lookout hosted or self-hosted) on the user device manually or by using MDM or UEM software.

When you are steering web traffic, the PAC file includes a set of domains to be excluded from the proxy so that users can access domains that do not work with the proxy, such as cert-pinned apps. Lookout provides a default domain and IP exclusion list for the known domains. To add more exclusions, create a custom category in the Management Console for those domains or URLs and add them to the proxy exclusion list as a custom domain list. For more information about custom categories, see the Category Management section.