It is possible to incorporate in NS7?
SSL Finger Printing
The IPS option to allow user defined rules include the option for SSL fingerprinting. With this option SSL communication can be blocked at the inital connection attempt by dropping the SSL key exchange
It is one of the improvements in opnsense I would like to NS7 @alefattorini @davidep @giacomo