Our pfsense serves the internet via Squid proxy + AD authentication while filtering HTTP/HTTPS access using Squidguard with WPAD enabled. So that users do not need to enter proxy manually as the WPAD functionality serves the proxy details to the user's browser.
Further, I've added two rules to block defaul HTTP (80) / HTTPS (443) access to make sure users won't go to the internet without the automatic proxy detection.
Now the problem is that, when I do block HTTP (80) & HTTPS (443) default services; it also blocks all the traffics along with mobile internet users too. PC's have the capability to select auto detect proxy so that WPAD will serve while PC browser requests. Now, are there any solution which I can allow mobile users to access through proxy while the default blocking to http/https stays?