ICAP Client
Next Generation Security Gateway Guide R80.20 | 48
1 The Client computer.
2 The Proxy server.
3 The Server computer on the Internet.
4 The ICAP Client component that runs on the Proxy server (2).
5 The ICAP Server component that runs on some computer on the network.
6 The Data Loss Prevention component that runs on some computer on the network.
A The Client computer (1) initiates a file upload to the Server computer (3).
B The ICAP Client component (4) intercepts the uploaded file and sends it to the ICAP
Server component (5).
C The ICAP Server component (5) forwards the uploaded file to the Data Loss Prevention
component (6) for examination, whether the DLP policy allows this file to leave your
network.
D The Data Loss Prevention component (6) returns its verdict about the uploaded file.
E The ICAP Server component (5) returns one of these to the ICAP Client component (4):
• A block message.
F The ICAP Client component (4) forwards the modified file from the ICAP Server
component (5) to the Server computer (3).
G The ICAP Client component (4) forwards the block message from the ICAP Server
component (5) to the Client computer (1).
Example data flow in Server Response Modification (RESPMOD) mode
1 The Client computer.