Q:Does the rule allowing access to the proxy contain the Officemode IP range as source?
A:yes, clients can reach proxy by its tcp port 8080. connection established, logs confirm that fact
Q:Why do you want them to use explicit Proxy? Is it due to the fact it is already set for the corporate network?
A:the main task is configure access for remote access users in order to they have the same Access policy both when they are in corporate network and when connected via vpn client
Q:When you use a PAC or WPAD.dat file you could exclude the Officemode network from the proxy and when set to hubmode, you can still force all traffic through the FW and apply a "at home" policy to that traffic.
A: Can you explain how i can implement it(is there any useful/helpful link? i never did anything like that)? does it mean that i can configure the same policy as on my security gateway for my remote access clients?