> I doubt it, why would the SSL cause problems unless you denied clients > authentication, but why would you deny access to your own clients?!?
You probably don't have the ability to sign valid certificates for update.microsoft.com. Since you're redirecting SSL traffic bound for that destination, instead of telling the application to talk to the right server, the common name is going to be wrong, and the SSL handshake will fail. Nathan --------------------------------------------------------------------- To unsubscribe, e-mail: support-unsubscr...@pfsense.com For additional commands, e-mail: support-h...@pfsense.com Commercial support available - https://portal.pfsense.org