When access to a banned site, there is no generated error page
For v4.40+ see this ArticleThis feature is available on Artica 4.30 Service Pack 105
By default, with or without decrypting SSL protocol, a denied SSL site generates a connection error on browsers.
This behavior is normal because the SSL protocol ( an encrypted tunnel ) cannot be redirected before any SSL certificates exchange.
Notice: “Pass first connection tunnel” option must be only enabled if you “decrypt SSL protocol”, If you activate this option and did not perform any SSL decryption, then web filtering will not block SSL sites.