ProxyOverrideRules

Proxy override rules

Supported versions

  • Windows: ≥ 145
  • macOS: ≥ 145
  • Android: Not supported
  • iOS: Not supported

Description

This policy enables rule-based proxy selection that determines which proxy Microsoft Edge uses based on the destination URL and other conditions you define.

When you configure this policy, it takes precedence over proxy settings configured by the ProxySettings policy, the chrome.proxy extension API, and any manual user settings.

If you disable this policy or don't configure it, existing proxy policies and user-defined settings continue to apply.

When selecting a proxy, Microsoft Edge evaluates entries in the ProxyOverrideRules policy in order. A rule matches when all of the following are true:

  • At least one URL pattern in DestinationMatchers matches.
  • No URL pattern in ExcludeDestinationMatchers matches.
  • If Conditions is specified and non-empty, all conditions are satisfied.

For the first matching rule, Microsoft Edge uses the proxy specified in ProxyList. If no rules match, proxy selection falls back to the settings defined by the ProxySettings policy.

The URL patterns supported by DestinationMatchers and ExcludeDestinationMatchers are documented at https://learn.microsoft.com/deployedge/configure-microsoft-edge-proxy-support#proxy-config-url-patterns.

Entries in ProxyList use PAC-style proxy strings, for example:

  • DIRECT
  • PROXY host:port
  • HTTPS host:port
  • SOCKS4 host:port
  • SOCKS5 host:port

You can also use URL-form proxy specifiers, for example:

  • http://host:port
  • https://host:port
  • socks4://host:port
  • socks5://host:port

Microsoft Edge uses the first reachable proxy in the list. Invalid entries are ignored.

The Conditions field defines additional requirements that must all be satisfied before an override rule is applied. If this field isn't specified, the rule is applied whenever a destination matches DestinationMatchers.

The DnsProbe condition checks whether the specified DNS Host can be resolved to an IP address. The host must include a hostname (for example, example.com) and can optionally include a scheme or port (for example, https://example.com, example.com:123, or https://example.com:123). If a secure scheme (for example, https) is specified, the DNS lookup might also request the HTTPS record (see RFC 9460).

If Result is set to resolved, the condition is satisfied when name resolution succeeds. If it's set to not_found, the condition is satisfied only when name resolution fails.

On managed devices, application of this policy is controlled by the machine-level EnableProxyOverrideRulesForAllUsers policy. By default, override rules configured by unaffiliated users aren't applied.

Supported features

  • Can be mandatory: Yes
  • Can be recommended: No
  • Dynamic Policy Refresh: Yes
  • Per Profile: Yes
  • Applies to a profile that is signed in with a Microsoft account: Yes
  • Can only be configured through cloud policy in the Edge management service: Yes

Data type

  • Dictionary

Windows information and settings

Group Policy (ADMX) info

  • GP unique name: ProxyOverrideRules
  • GP name: Proxy override rules
  • GP path (Mandatory): Administrative Templates/Microsoft Edge/Proxy server
  • GP path (Recommended): N/A
  • GP ADMX file name: MSEdge.admx

Example value

[{"Conditions": [{"DnsProbe": {"Host": "corp.ads", "Result": "resolved"}}], "DestinationMatchers": ["https://some.app.com", "https://Contoso.com"], "ExcludeDestinationMatchers": ["https://mail.Contoso.com"], "ProxyList": ["HTTPS proxy.app:443", "DIRECT"]}]

Registry settings

  • Path (Mandatory): SOFTWARE\Policies\Microsoft\Edge
  • Path (Recommended): N/A
  • Value name: ProxyOverrideRules
  • Value type: REG_SZ

Example registry value

[{"Conditions": [{"DnsProbe": {"Host": "corp.ads", "Result": "resolved"}}], "DestinationMatchers": ["https://some.app.com", "https://Contoso.com"], "ExcludeDestinationMatchers": ["https://mail.Contoso.com"], "ProxyList": ["HTTPS proxy.app:443", "DIRECT"]}]

Expanded example registry value

[
  {
    "Conditions": [
      {
        "DnsProbe": {
          "Host": "corp.ads",
          "Result": "resolved"
        }
      }
    ],
    "DestinationMatchers": [
      "https://some.app.com",
      "https://Contoso.com"
    ],
    "ExcludeDestinationMatchers": [
      "https://mail.Contoso.com"
    ],
    "ProxyList": [
      "HTTPS proxy.app:443",
      "DIRECT"
    ]
  }
]

Mac information and settings

  • Preference Key name: ProxyOverrideRules
  • Example value:
<key>ProxyOverrideRules</key>
<array>
  <dict>
    <key>Conditions</key>
    <array>
      <dict>
        <key>DnsProbe</key>
        <dict>
          <key>Host</key>
          <string>corp.ads</string>
          <key>Result</key>
          <string>resolved</string>
        </dict>
      </dict>
    </array>
    <key>DestinationMatchers</key>
    <array>
      <string>https://some.app.com</string>
      <string>https://Contoso.com</string>
    </array>
    <key>ExcludeDestinationMatchers</key>
    <array>
      <string>https://mail.Contoso.com</string>
    </array>
    <key>ProxyList</key>
    <array>
      <string>HTTPS proxy.app:443</string>
      <string>DIRECT</string>
    </array>
  </dict>
</array>

See also

  • Sist oppdatert