I am just getting used to the new 3.2 and all seems well. From my woes with 3.0 I remember that the proxy address needs a FQDN or it doesn't work. So host.domain:port.
I am setting up the network client side tonight and proxy is one of the things I will be aiming at.
The SSO is a kerberos method so it requires all the domain to be correct. Also the group settings are the same.
With 3.0 I gave up and used group policies to set the proxy so that admins bypassed and users had a single filter.
That is prob how I will operate it again but will have a go with the groups.
Lol, last time a member of staff commented on that porn in the work place isn't appropriate. My reply that I am testing the proxy filters didn't cut any weight. Oh the woes of a sysadmin.