Re: [squid-users] MITM the MITM

2022-01-07 Thread Amos Jeffries
On 7/01/22 06:26, Grant Taylor wrote: On 1/4/22 9:56 AM, Will BMD wrote: I'm not aware of WCCP, but I'll look into it. In short, the Web Cache Communications Protocol, "... specifies interactions between one or more routers (or Layer 3 switches) and one or more web-caches ...". Link - Web

Re: [squid-users] MITM the MITM

2022-01-07 Thread Amos Jeffries
FYI people, When Squid On 7/01/22 06:33, Grant Taylor wrote: On 1/4/22 2:35 AM, Will BMD wrote: HTTP proxy limitation The system cannot decrypt traffic if an HTTP proxy is positioned between a client and your managed device, and the client and server establish a tunneled TLS/SSL connection

Re: [squid-users] MITM the MITM

2022-01-04 Thread Will BMD
On 04/01/2022 04:19, Grant Taylor wrote: On 1/3/22 5:19 PM, Will BMD wrote: Hey all, Hi, From the Firewalls perspective all client connections are originating as the proxy server. We're wanting to use the https inspect feature of the firewall, I'm taking "HTTPS inspect" to be the firewal

Re: [squid-users] MITM the MITM

2022-01-04 Thread Will BMD
Hey Antony, Thanks for the quick response. - What sort of firewall is this? The firewall is a Cisco FTDv 6.6. - What does "HTTPS inspect" actually mean? - How does the firewall "inspect" HTTPS traffic, which by design is encrypted between client and server (neither of which is the firew

Re: [squid-users] MITM the MITM

2022-01-03 Thread Antony Stone
On Tuesday 04 January 2022 at 01:19:28, Will BMD wrote: > Hey all, > > I currently have the following network topology, it's emulating a real > world environment. The proxy is running ssl_bump. > > LAN <-> Squid Proxy <-> Firewall <-> Internet > > From the Firewall's perspective all client conn

[squid-users] MITM the MITM

2022-01-03 Thread Will BMD
Hey all, I currently have the following network topology, it's emulating a real world environment. The proxy is running ssl_bump. LAN <-> Squid Proxy <-> Firewall <-> Internet From the Firewalls perspective all client connections are originating as the proxy server. We're wanting to use the