[squid-users] WCCP, transparent, with SSL

I emailed about this once in the past, not sure I got a real definitive answer, so I dropped it, but not I would like to implement this.

We use Squid utilizing WCCP, currently just service cache (port 80) redirection. I would like to redirect 443 to the squid proxy as well (I know you cant cache it). I just want squid to make the request on behalf of the employee, so I can also log https visits. So for example, I could block access to lets say www.microsoft.com using squid and employees would get blocked cause port 80 is redirected via wccp to the proxy server, but they could visit https://www.microsoft.com because its not configured to go to the proxy via wccp.

I understand we need to configure the router, but what different should be don on the proxy server? We have the correct iptables rules setup to dnat port 80 to 3128, I assume this is not as easy as doing a 443 to 3128.

Regards,
Nick
Received on Fri Jan 09 2009 - 15:26:13 MST