Thanks everyone this is perfectly resolved and I am now getting A+. I suspect the mixed content for the form is coming from the backend not having SSL enable so the content is transfer unencrypted internally only. Which can easily be fixed by encrypting all internal servers. Hopefully this is the case as the app is modern and created within last year and has both http and https capabilities but as the internal server is a test server running on http it is complaining as it is only accepting http as no SSL is setup yet. Probably need to set that up too eventhough it is just for internal usage and testing purpose.

[image: 1685119009970-96b5ffc6-8e97-4adc-9d42-cfcbb9dad5ed-image.png] New Pull submitted

This has been FIXED after updating to the latest version 23.05.

https://redmine.pfsense.org/issues/14024

@ciconet Here is how I did this, keep in mind I have approved specific site to only be spliced and not use MITM mode for those. First: Create a advanced config like this, [image: 1684694638657-screenshot-2023-05-21-at-11.42.45-am-resized.png] Second: Populate your file with the URLS you want to splice. [image: 1684694712213-screenshot-2023-05-21-at-11.44.42-am-resized.png]

You can also use http://dsi.ut-capitole.fr/blacklists/download/blacklists_for_pfsense_reducted.tar.gz If you lack memory like I do to run the full list.

@trumee nginx.conf saying not allowed to use location tag

@jonathanlee [image: 1684356427962-clamd-table.jpg] [image: 1684356692691-23.05rc-clamav.jpg] In my logs all is fine so I can´t help you out and don´t know what problem that is, perhaps it would be also able to see here I thought first or it is something common (bug) but it seems not to be.

@ben-ihelputech Many thanks, that was quite helpful.

@jonathanlee Thanks a lot

@dobby_ Thanks a lot, I am going to try.

@michele-trotta Hi everyone , sorry for the delay, but the problem has been solved. When the citrix workspace web app is launched it is asked to open a new page with microsodt EDGE. When "Open APP" is confirmed, a file with the ICA extension is downloaded. In this file there is a parameter that identifies an internal proxy that citrix will use. Now once this value has been discovered, it must be included in our Squid and the game is done!!!! Good job everyone Michele

@viragomann I have one interface for LAN, other for VLANs.