Looks like I figured it out. For us to be able to block ports 80 and 443 we had to create a custom error page in another server and configure squidguard to redirect the errors to it in Group ACL > Redirect mode set to ext url err page (enter URL) and on the redirect box http://other_server_ip/path_to_custom_error_page/index.php?clientAddress=%a&clientName=%n&clientUser=%i&clientGroup=%s&targetGroup=%t&clientUrl=%u
I'm not the greatest at web pages but this is the code for the basic custom error page, once it is displayed you will realize that it is obviously based on the pfsense built in error page
$clientAddress = $_GET['clientAddress'];
$clientName = $_GET['clientName'];
$clientUser = $_GET['clientUser'];
$clientGroup = $_GET['clientGroup'];
$targetGroup = $_GET['targetGroup'];
$clientUrl = $_GET['clientUrl'];
echo "\n";
echo "\n";
echo "
### Request denied by pfSense proxy: 403 Forbiden";
echo "
\n";
echo " **Reason:**
\n";
echo "
* * *
";
echo " **Client address:** ";
echo "$clientAddress";
echo "
\n";
echo " **Client group:** ";
echo "$clientGroup";
echo "
\n";
echo " **Target group:** ";
echo "$targetGroup";
echo "
\n";
echo " **URL:** ";
echo "$clientUrl";
echo "
\n";
echo "
* * *
";
echo "\n";
echo "\n";
#RESPONSE CODE
http_response_code(403);
?>
