Check Point R80.20 - Page 71

ICAP Client
Next Generation Security Gateway Guide R80.20 | 71
HTTP Response X-Header
Description
Examples
X-Violations-Found
Contains the detailed
description of all the policy
violations (for example, found
viruses) that occurred while
handling the request.
If the scanned content was an
archive, the scan results are
listed for the contained files as
well.
If multiple threats were found
for a single file, only the first
one is returned.
This header is present only if
the content was scanned, and
some violations were found.
This header has a multi-line
value starting with the number
of reported violations on the
first line and four additional
lines per violation:
1) The first line contains the
number of the reported
violations.
2) The following lines contain
the details:
Filename
May describe a single file
within an archive that the
ICAP Client sent to the ICAP
Server.
ThreadDescription
Human readable
description of the threat.
For example, the virus
name or the policy violation
description. It may contain
spaces and should not be
quoted.
ProblemID:
One-digit integer identifier
of the policy violation. For
example, a virus ID.
Currently, 0 is returned for
all threats.
ResolutionID:
0: File was not repaired.
1: File was repaired.
2: Violating part was
removed (usually used if a
file was removed from a
container).
X-Violations-Found: 2
test.zip/dir1/eicar.com
EICAR Test String
11101
2
test.zip/dir2/eicar.com
EICAR Test String
11101
2