User requests are connecting directly to the origin content server (OCS) instead of the ProxySG appliance, even though you have specified in the Proxy Auto-Configuration (PAC) file that these requests should be sent to the appliance. You can verify that requests are connecting directly by using a network monitoring utility such as TCPView.exe to determine where the browser is redirecting.
Explicit proxy deployment
This problem has more than one possible solution: