Check Point R80.20 - Page 47

ICAP Client
Next Generation Security Gateway Guide R80.20 | 47
ICAP packet structure
The ICAP protocol is encapsulated into the TCP protocol:
ICAP methods
Method
Description
REQMOD Client Request Modification. The ICAP Client uses this method for an HTTP / HTTPS
request modification.
RESPMOD Server Response Modification. The ICAP Client uses this method for an HTTP /
HTTPS response modification.
OPTIONS The ICAP Client uses this method to retrieve configuration information from the
ICAP Server.
ICAP decisions
ICAP Decision
Description and Example
Block
• ICAP sends an error to the Client.
• ICAP sends a block page to the Client.
For example, you can present a Check Point UserCheck page from
the Threat Emulation, Anti-Virus, or URL Filtering Software Blades.
Data Modification Modification of the HTTP content.
For example, your Data Loss Prevention engine can replace the DOCX
file attached to an email with a PDF file.
Continue / Not
modified
Default gateway or Proxy server can forward the HTTP Request /
Response to its original destination.
Example data flow in the Request Modification (REQMOD) mode