What About TAC Pro Support
-
If I were to purchase the TAC Pro support would they be able to provide me with the precise instructions/guidance to setup the system based on needs? I am having a heck of a time trying to filter through all of the feedback that I am getting to block sites, particularly those whose URLs are encrypted and after looking at the support options wondered if that might be the best option. As much as I would like I just dont have the time to do a trial and error and instructions vary along with varying opinions from the community and I have yet to get a handle of PFS workflow which at times seems confusing. Thank you.
-
TAC support is mostly a break-fix service. We can offer advice when needed but we cannot entirely configure Squid or pfBlocker for you.
We do also offer PSE as separate service that can complete a setup like that. You may be somewhere in between those though. If you contact out sales guys they can discuss options with you.Steve
-
Thanks Steve for that. My search for how to filter and restrict web site access to sites that use HTTPS and even SSL has been difficult and just when I think I have found the answer something else comes up and seems to put me back to square one which is why I thought TAC would be a resource to help me achieve that goal.
You see from within the PFS community it seems based on feedback that yes I can filter and restrict access to sites that use encrypted URLs (HTTPS and the like) using Squid for example, but I was able to get feedback from Tom at Lawrence Systems which seems to suggest that this is not possible with PFS and/or the available packages and now I am scratching my head.
Do you know if it is possible within PFS and the available packages to restrict access to devices on my network to specific web sites that use encrypted url's?
If yes are you aware of any documentation, videos, cave writings that go into detail on how to do this?
I received a response from someone on another post that said they were able to do it and provided details, but I have yet to give it a try as I do not want to put in the time if it isnt going to actually work. I built a new box to test this out and am wondering if I should even bother.
Thanks for your input
-
You two options to do this in pfSense. http/https proxying with Squid or DNS filtering with pfBlocker-NG.
Both can work but both have restrictions.
See our Squid hangout for what's possible with Squid:
Youtube Video – [04:34..]Steve
-
@stephenw10 Thanks Steven I will look this over and see if I cant make it work. Hope all is well.
