https sessions are encrypted so scanning it for viruses is a futile exercise. Since any virus would be masked by the encryption.
On the HAVP website there is only 1 topic regarding this. Basically you need to turn the request into a http request and scan that instead of the https request:
- You will need to create a CA-root, then sign a wildcard certificate with the CA-root, then tell apache to use these files.
- You need to import the root in your browser.
- You can set up a virtualhost on port 8443, transparently forward all outgoing SSL traffic to this port, then tag all SSL-traffic with a extra header, then let it through HAVP, and then read off this header at the other end to decide if the connection should be SSL or not, and then rewrite the urls so they go through HAVP proxy.
- Then you need a virtualhost on 8448, accepting standard HTTP, that tags traffic for HTTP and send it to HAVP.
That topic also has one and two example apache configurations.