Squid + SSO

It is necessary to install squid + squidguard + squidclamav + active directory authorization.



debian 12

auto-update of antivirus
authorization through active directory  ( Kerberos) should be required for everyone except for one subnet, where authorization by IP should be allowed without a login/password prompt

Blocking principles: Everything is blocked except for allowed site lists

There will be several departments:
1) There is a list of domains that are allowed for everyone
2) There is a list of allowed domains for each department

3) There should be the ability to connect blocking lists by categories for both everyone and for individual departments