<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from rtf -->
<style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<font face="Calibri" size="2"><span style="font-size:11pt;">
<div><font color="#1F497D">Hello Eliezer and Hans,</font></div>
<div><font color="#1F497D"> </font></div>
<div><font color="#1F497D">Our github.com repo has all the scripts necessary to rebuild latest Squid 3.5.19 with SSL Bump and latest ecap on Ubuntu 14.04 see <a href="https://github.com/diladele/squid-ubuntu"><font color="blue"><u>https://github.com/diladele/squid-ubuntu</u></font></a>.</font></div>
<div><font face="Times New Roman" size="3" color="#1F497D"><span style="font-size:12pt;"> </span></font></div>
<div><font color="#1F497D">We reuse the Debian Testing package and apply some simple patches on it. I am pretty sure this is as easy to do in Debian Jessy. </font></div>
<div><font color="#1F497D">Hope this will help to build the Jessy package easier.</font></div>
<div><font color="#1F497D"> </font></div>
<div><font color="#1F497D">Best regards,</font></div>
<div><font color="#1F497D">Rafael Akchurin</font></div>
<div><font color="#1F497D">Diladele B.V.</font></div>
<div><font color="#1F497D"> </font></div>
<div><font color="#1F497D">--</font></div>
<div><font color="#1F497D">Please take a look at Web Safety - our ICAP based web filter server for Squid proxy at
<a href="http://www.diladele.com">http://www.diladele.com</a></font></div>
<div><font face="Times New Roman" size="3" color="#1F497D"><span style="font-size:12pt;"> </span></font></div>
<div><font face="Times New Roman" size="3" color="#1F497D"><span style="font-size:12pt;"> </span></font></div>
<div>_____________________________________________<br>
<b>From:</b> squid-users [<a href="mailto:squid-users-bounces@lists.squid-cache.org">mailto:squid-users-bounces@lists.squid-cache.org</a>] <b>On Behalf Of </b>Eliezer Croitoru<br>
<b>Sent:</b> Thursday, June 23, 2016 4:08 PM<br>
<b>To:</b> hans.meyer0@fn.de<br>
<b>Cc:</b> squid-users@lists.squid-cache.org<br>
<b>Subject:</b> Re: [squid-users] https antivirus proxy necessary?</div>
<div><font face="Times New Roman" size="3"><span style="font-size:12pt;"> </span></font></div>
<div><font face="Times New Roman" size="3"><span style="font-size:12pt;"> </span></font></div>
<div><font color="#1F497D">Hey,</font></div>
<div><font color="#1F497D"> </font></div>
<div><font color="#1F497D">Sorry for not responding earlier.</font></div>
<div><font color="#1F497D">Your question regarding having two layers of AV technically depends on what both are offering as a product.</font></div>
<div><font color="#1F497D">We can spate the question of unwrapping HTTPS\TLS connections from inspecting the HTTPS content using an AV.</font></div>
<div><font color="#1F497D">If you have a trusted source and as an example I would take Microsoft.</font></div>
<div><font color="#1F497D">Microsoft is known to secure it's infrastructure despite some rumors from security "experts" so you won't need to inspect their updates.</font></div>
<div><font color="#1F497D">You might want to cache them but not check them with AV. The day you will need to inspect them with AV things will probably start falling from the sky..</font></div>
<div><font color="#1F497D">If you have a defined business web usage policy it minimizes the options to malice software download but it only fits for special cases with high risk for theft or other crime related sensitive data\info.</font></div>
<div><font color="#1F497D"> </font></div>
<div><font color="#1F497D">Building Latest squid from sources for Debian Jessie can cost money and in some cases it's not worth it.</font></div>
<div><font color="#1F497D">The answer regarding the price would be the level of QA and other development and integration stages.</font></div>
<div><font color="#1F497D">Depends on the business size the HTTPS url inspection by itself can be worth a lot.</font></div>
<div><font color="#1F497D"> </font></div>
<div><font color="#1F497D">Can you define what can be costly when building squid for Jessie?</font></div>
<div><font color="#1F497D">I am asking since I am in the middle of working on a version of latest squid with SSL-BUMP support.(it takes quite some time to automate it)</font></div>
<div><font color="#1F497D"> </font></div>
<div><font color="#1F497D">Eliezer</font></div>
<div><font color="#1F497D"> </font></div>
<div><font face="Arial Rounded MT Bold" color="#1F497D">----</font></div>
<div><font face="Times New Roman" size="3"><span style="font-size:12pt;"><a href="http://ngtech.co.il/lmgtfy/"><font face="Arial Rounded MT Bold" size="2" color="#0563C1"><span style="font-size:11pt;"><u>Eliezer Croitoru</u></span></font></a><br>
<font face="Arial Rounded MT Bold" size="2" color="#1F497D"><span style="font-size:11pt;">Linux System Administrator<br>
Mobile: +972-5-28704261<br>
Email: eliezer@ngtech.co.il</span></font></span></font></div>
<div><font face="Times New Roman" size="3"><span style="font-size:12pt;"> << File: ATT00001.txt >> </span></font></div>
<div><font face="Times New Roman" size="3" color="#1F497D"><span style="font-size:12pt;"> </span></font></div>
<div><b>From:</b> squid-users [<a href="mailto:squid-users-bounces@lists.squid-cache.org">mailto:squid-users-bounces@lists.squid-cache.org</a>] <b>On Behalf Of </b>hans.meyer0@fn.de<br>
<b>Sent:</b> Wednesday, June 22, 2016 5:10 PM<br>
<b>To:</b> squid-users@lists.squid-cache.org<br>
<b>Subject:</b> [squid-users] https antivirus proxy necessary?</div>
<div><font face="Times New Roman" size="3"><span style="font-size:12pt;"> </span></font></div>
<div><font face="undefined" size="3"><span style="font-size:12pt;">Do you think it's necessary to have an additional https antivir proxy to normal client antivirus?<br>
We are using Avast Business that already offers a web protection.<br>
Can an additional antivir proxy significant higher the level of protection?<br>
In general I think two different antivirus programms see more then one.<br>
But on the other hand an HTTP/HTTPS antivirus proxy is an additional attack surface.<br>
Especially because its costly to build the latest squid version with https support from source on a debian jessi<font color="#1F497D">e</font>.<br>
So the proxy will not be<font color="#1F497D"> </font>up a proxy or not?</span></font></div>
<div><font face="Times New Roman" size="3"><span style="font-size:12pt;"><br>
<br>
---</span></font></div>
<div><font face="Arial" size="2"><span style="font-size:10pt;">Mail & Cloud Made in Germany mit 3 GB Speicher! <a href="https://email.freenet.de/mail/Uebersicht?epid=e9900000450"><font color="blue"><u>Jetzt kostenlos anmelden</u></font></a> << OLE Object: Picture
(Device Independent Bitmap) >> </span></font></div>
<div><font face="Times New Roman" size="3"><span style="font-size:12pt;"> </span></font></div>
</span></font>
</body>
</html>