PFSense Squid SSL Exemptions



  • I have PFSense using SQUID and doing SSL inspections. It seems to work great. However, there are some things (mainly apps on the iPhone) that do not work. We do something similar at work, and I can easily add SSL Inspection exemptions, which lets the apps work. I was wondering if there's a way I can have exempted domains that are not intercepted, yet still have SSL inspection turned on?

    Thanks!

    PS–PFSense is an amazing product!!



  • The Cache/Proxy forum is here.

    I suspect that the best you can do is to add the IP addresses of these sites to Squid's Bypass Proxy for These Destination IPs section.



  • Sorry, I'm new to the forums and didn't notice the category.