What is ICAP scanning?

IBM® Sterling Secure Proxy supports the Internet Content Adaptation Protocol (ICAP) to enable communication with external servers hosting third-party anti virus software to scan inbound data (files) in transit via Secure Proxy before it is sent to the backend destination server.

What is McAfee ICAP?

Internet Content Adaptation Protocol (ICAP) McAfee Web Gateway, acting as an ICAP server, can perform a full range of malware analysis and scanning. Files infected with malware can be prevented from contaminating the web server, while files free of malware can be processed.

Why ICAP is used?

The Internet Content Adaptation Protocol (ICAP) is designed to offload the processing of Internet-based content to dedicated servers. ICAP helps free up resources and standardize how features are implemented. A proxy server, such as WebSEAL, can be configured to pass client requests and responses through ICAP servers.

What is an ICAP operation?

Internet Content Adaptation Protocol (ICAP) is a standard or URL modification, web cache management, and anti‐virus scanning of URL, HTTP posts, and file server files. The node uses ICAP as a client to send file content to antivirus servers for virus scanning.

How do I set up ICAP?

Solution 1

  1. Open the Web Gateway manager.
  2. Select Configuration.
  3. Select the Appliance Name you want to enable the ICAP Server on.
  4. Select Proxies and scroll down for ICAP options.
  5. Select the Enable ICAP Server checkbox.
  6. Optional: If you need to change the default settings, select the needed Listener and click Edit.

How do I connect to ICAP server?

To configure ICAP server connection settings:

  1. In the application web interface window, select the Settings → General → ICAP server section.
  2. In the ICAP server address list, select one of the following values:
  3. Type the ICAP server connection port.

What causes ICAP error?

There are several possible causes: The Content Analysis appliance is down and your ICAP policy is set to Deny the client request if an error occurs during ICAP processing. The antivirus license is invalid or expired. Secure ICAP settings are inconsistent, or SSL is configured incorrectly.

How do I use ICAP?

Configure ICAP by using the CLI

  1. Enable the feature.
  2. Configure a proxy server.
  3. Configure a TCP service to represent the ICAP servers.
  4. Configure a load balancing virtual server.
  5. Add a custom ICAP profile.
  6. Configure an action to perform if the policy returns true.
  7. Configure a policy to evaluate traffic.

How does ICAP server work?

How do I fix ICAP error?

  1. Enable Secure ICAP Connections.
  2. Add CAS Certificate to ProxySG.
  3. Configure ICAP Policy on a ProxySG Appliance. Automatically Configure an ICAP Service on the ProxySG. Manually Configure an ICAP Service on the ProxySG. Configure ICAP Policy.
  4. Test the Threat Protection Policy.
  5. Configure Malware Analysis.

What is ICAP in Fortigate?

Internet Content Adaptation Protocol (ICAP) is an application layer protocol that is used to offload tasks from the firewall to separate, specialized servers. For more information see RFC 3507. ICAP profiles can only be applied to policies that use proxy-based inspection.

How do I setup an ICAP server?

https://www.youtube.com/watch?v=DX-kRQGe9Dg