squid

JackDante · 12-08-2005, 03:01 AM

So far I have set up squid with dansguardian on debian sarge.
I want the allowed traffic to be virusscanned (proxying M$ Network)I am planning to use Viralator... or are there any simpler tools?
But most important: I also want / have to scan the SSL traffic for virusses. Are there any tools / configs for that???
Thx for replies

fouldsy · 12-08-2005, 03:33 AM

There's a virus scanning plugin for DansGuardian that runs the ClamAV engine, which we've had running for 18 months or so without problems. Can be a pain to setup depending on your version of DG, as the AV patches must match. Other than that, not hard. However, I don't think it's possible to scan inside SSL connections in the same way it can't handle content filtering for those connections simpyl due to the nature of the traffic.

JackDante · 12-09-2005, 07:01 AM

Well ok, with BlueCoat ProxySG incl SSL it is possible to scan SSL traffic. A temporary cert. is issued to the client and then another cert. is send to the ssl server. It works (costs 15k), but does it work with linux as well?
Thx J.