Proxy Bypass

[Stun Tech]

Hello
I have an AntiVirus program (Sophos Endpoint) that I would like to be able to update behind squid proxy.

I have added the domain names for the Antivirus program to an Alias. And the Alias is in the Transparent Proxy settings area to Bypass Proxy for These Source IPs and Bypass Proxy for These Destination IPs.

Am I missing something?

[KOM]

@stun-tech said in Proxy Bypass:

Am I missing something?

The AV update servers will never be Source IPs.

[Stun Tech]

I understand that but would that block the Updates from passing ?

[KOM]

No. If your updates are being blocked, check squid's access.log to see what's going on.

IMO transparent mode is a major pain in the ass with https. Run it in explicit mode and then configure WPAD to allow your devices to autodiscover the proxy on their own. In explicit mode, you would normally block access to tcp80,443 on LAN to force proxy use.