Last updated: August 14, 2026
Global HTTP Proxy
This page explains how to configure the macOS Global HTTP Proxy profile in MDM to route all HTTP network traffic through a designated proxy, ensuring data security by filtering personal and corporate data. It covers profile settings for both manual configuration using a server name or IP address and port, and automatic configuration using a PAC file URL, along with optional authentication credentials. It also highlights the importance of placing the proxy server in a public or edge network to keep devices manageable outside the corporate network.
Global HTTP Proxy can be configured to ensure that all the HTTP network traffic is passed only through the proxy. This ensures data security since all the personal and corporate data is filtered through the Global HTTP proxy.
When the Global HTTP Proxy server is internal to the organization/private network, any device outside the corporate cannot reach the proxy server and no communication is possible between the device and a network. Hence a device outside the organization, cannot be managed by MDM as no communication is possible between the device and the MDM Server. For the device to be managed at all times, ensure the proxy server is in the edge/public network.
Profile Description
| Profile Specification | Description |
|---|---|
| Global HTTP Proxy Settings | |
| Proxy Settings | You can define the Proxy settings to be manual or automatic. |
| Server | For manual proxy settings, specify the server name/IP address and for automatic proxy settings, specify the PAC file URL. |
| Port | Port numbers which needs to be opened can be specified here. |
| User Name | Specify the 'User Name' for the proxy |
| Password | Specify the proxy password |
Frequently Asked Questions
What happens if a device is outside the corporate network when Global HTTP Proxy is configured?
If the Global HTTP Proxy server is internal to the organization, a device outside the corporate network cannot reach the proxy server, and as a result it cannot communicate with the MDM Server either. To keep the device manageable at all times, place the proxy server in the edge or public network.
Can the Global HTTP Proxy be configured automatically instead of manually?
Yes. You can set the Proxy Settings to manual, where you provide the server name/IP address and port, or automatic, where you provide the PAC file URL.
What details are needed to set up a Global HTTP Proxy profile?
You need the proxy server name or IP address (or the PAC file URL for automatic settings), the port number to be opened, and the user name and password for the proxy, if authentication is required.