Squid 0.4.43_1 / Pfsense 2.4.2 > Squid proxy server > ACL > squid allow ports > put specify LAN IP ports in ACL SafePorts / ACL SSLPorts. It's work for me.