Re: [squid-users] Migrating from iPlanet Web Proxy Server

On Tue, Jul 5, 2011 at 6:24 PM, Marcin J. Kraszewski <marcin_at_ncf.ca> wrote:

[...]

>> > . filter objectionable URLs and content, including viruses, HTML
>> tags> and ActixeX content
>>
>> You need an ICAP service for that. There are many commercial and some
>> free offerings for that.
>
> But squid supports ICAP in the current version, doesn't it?

Yes.

[...]

>> I don't know if I'd run a proxy on the firewall, but if it fits your
>> performance needs, certainly.
>
> I don't have that many users, so performance is fine.
>
>> Are you running a transparent proxy or is it just hosted on the same
>> machine as the firewall?
>
> There is an HTTP proxy on the firewall which is a transparent one, and
> then I have the DMZ proxy, where I would like to use squid. It will be
> a dedicated server (as the iPlanet is right now).

Squid can work in transparent mode, but it will not possible to
perform user authentication in that way (not due to a limitation in
Squid, but due to a basic security feature of all browsers).

-- 
    /kinkie