From c9e1423f581697de2c8d62fa1fbe926fc97bc028 Mon Sep 17 00:00:00 2001
From: Mikhail Morev <mmorev@users.noreply.github.com>
Date: Thu, 12 Jan 2017 12:04:11 +0600
Subject: [PATCH] Update main.xml

---
 .../app/controllers/OPNsense/Proxy/forms/main.xml | 15 ++++++++++-----
 1 file changed, 10 insertions(+), 5 deletions(-)

diff --git a/src/opnsense/mvc/app/controllers/OPNsense/Proxy/forms/main.xml b/src/opnsense/mvc/app/controllers/OPNsense/Proxy/forms/main.xml
index de09db916..82fa59a2d 100644
--- a/src/opnsense/mvc/app/controllers/OPNsense/Proxy/forms/main.xml
+++ b/src/opnsense/mvc/app/controllers/OPNsense/Proxy/forms/main.xml
@@ -223,19 +223,24 @@
             </field>
             <field>
                 <id>proxy.forward.sslbump</id>
-                <label>Enable SSL mode</label>
+                <label>Enable SSL inspection</label>
                 <type>checkbox</type>
                 <help><![CDATA[
-                  Enable sslbump mode,
-                  which makes the proxy act as a man in the middle between the internet and your clients.<br/>
+                  Enable SSL inspection mode,
+                  which allows to log HTTPS connections information, such as requested URL and/or
+                  make the proxy act as a man in the middle between the internet and your clients.<br/>
                   Be aware of the security implications before enabling this option.
                   ]]></help>
             </field>
             <field>
                 <id>proxy.forward.sslurlonly</id>
-                <label>SSL Domain/IP only</label>
+                <label>Log SNI information only</label>
                 <type>checkbox</type>
-                <help>Do not filter content, only domains and addresses</help>
+                <help><![CDATA[
+                  Do not decode and/or filter SSL content, only log requested domains and IP addresses.<br/>
+                  Some old servers may not provide SNI, so their addresses will not be indicated.<br/>Get more information about
+                  <a href="https://wikipedia.org/wiki/Server_Name_Indication" target="_blank">Server Name Indication</a>.
+                  ]]></help>
             </field>
             <field>
                 <id>proxy.forward.sslbumpport</id>