I don't know any free SSL scanner. We are using the WebWasher for much more
than just SSL scanning anyway. Squid isn't sufficient at all for enforcing
a corporate security policy. This may change once large companies will
stop using crap like Windows and especially the Internet Explorer.
I'm not saying we use only squid - in fact I would not openly lay out
details of security setups in a mailing list :-X
We use Squid and WebWasher in a proxy chain though because WebWasher is
weak at ACLs. Squid has an unmatched flexibility in terms of ACLs and is
obviously a cache - what WebWasher isn't. You could as well try to use
both through an ICAP connection since WebWasher works both as a
HTTP/HTTPS/FTP proxy and as an ICAP server.
That's what I wanted to know. Thanks.
Yours,
Jakob Curdes
