Check Point R80.20 - Page 74

ICAP Client
Next Generation Security Gateway Guide R80.20 | 74
To configure the additional HTTP response X-Headers
You add the additional HTTP response X-Headers as values of the specific kernel parameter:
Item
Description
Name
icap_unwrap_append_header_str
Type String
Notes
• Length of each added HTTP header is up to 80 characters
• You can add up to 21 such HTTP headers
• The ICAP Client also uses this HTTP response status:
HTTP/1.0 403 Forbidden (according to RFC 3507
https://tools.ietf.org/html/rfc3507).
For general instructions, see Working with Kernel Parameters on Security Gateway (on page 547).
To see the list of the configured HTTP response X-headers
1.
Set the value of this kernel parameter to the string '__print__':
# fw ctl set str icap_unwrap_append_header_str '__print__'
2.
Print the list of the configured HTTP headers:
# dmesg | grep append_icap_unwrap_headers
Example:
[Expert@GW:0]# fw ctl set str icap_unwrap_append_header_str '__print__'
[Expert@GW:0]# dmesg | grep append_icap_unwrap_headers
[fw6_0];append_icap_unwrap_headers: ==> new icap_unwrap_headers array is:
[ X-Virus-ID ; X-Violations-Found ; X-Infection-Found ;]
[fw4_0];append_icap_unwrap_headers: ==> new icap_unwrap_headers array is:
[ X-Virus-ID ; X-Violations-Found ; X-Infection-Found ;]
[Expert@GW:0]#
To add an HTTP response X-Header in detect only mode temporarily
Note - In this mode, the ICAP Client does not block the matched HTTP connections.
1.
Set the value of this string kernel parameter to the name if the X-header:
# fw ctl set str icap_unwrap_append_header_str '<Name of X-header >'
2.
Print the list of the configured HTTP headers:
# dmesg | grep append_icap_unwrap_headers
Example:
[Expert@GW:0]# fw ctl set str icap_unwrap_append_header_str
'X-Response-Info'
[Expert@GW:0]# fw ctl set str icap_unwrap_append_header_str
'X-Response-Desc'
[Expert@GW:0]# fw ctl set str icap_unwrap_append_header_str '__print__'
[Expert@GW:0]# dmesg | grep append_icap_unwrap_headers
[fw6_0];append_icap_unwrap_headers: ==> new icap_unwrap_headers array is:
[ X-Virus-ID ; X-Violations-Found ; X-Infection-Found ; X-Response-Info ;
X-Response-Desc ;]
[fw4_0];append_icap_unwrap_headers: ==> new icap_unwrap_headers array is:
[ X-Virus-ID ; X-Violations-Found ; X-Infection-Found ; X-Response-Info ;