Hey all,
I currently have the following network topology, it's emulating a real
world environment. The proxy is running ssl_bump.
LAN <-> Squid Proxy <-> Firewall <-> Internet
From the Firewalls perspective all client connections are originating
as the proxy server. We're wanting to use the https inspect feature of
the firewall, but according to our firewall documentation it appears due
to the location of our proxy servers we would be unable to do so.
My question is, if the proxy is behaving as a MITM between itself and
the client, can't the Firewall do the same thing between itself and the
proxy? I suspect it is possible, but might potentially involve a lot of
headaches and a big hit on performance?
Any insight into this would be greatly appreciated.
Thank you,
Will
_______________________________________________
squid-users mailing list
squid-users@xxxxxxxxxxxxxxxxxxxxx
http://lists.squid-cache.org/listinfo/squid-users
