Send HTTP requests to
the ICAP server
Each client request to a website is sent to the ICAP server.
ICAP Server
Server Indicates the ICAP server.
ICAP Port Indicates the ICAP port.
Name of ICAP service Indicates the name of the service to set up. This information varies according to the
solution used, the ICAP server as well as the port used.
Authenticationon the ICAP server
Information available on the firewall can be used for performing ICAP services.
Example
It is possible to define in an ICAP server that a certain site is intended for a certain user. In this
case, you will be able to filter according to an LDAP ID or an IP address.
Send the
username/group name
This option allows using information relating to the LDAP base (especially the logins of
authenticated users).
Send client’s IP
address
This option allows using IP addresses of HTTP clients who send requests to Adapter
(object used for translating between the ICAP format and the requested format).
Advanced properties
Whitelist (will not be sent to the ICAP server)
HTTP server (Host –
Network – Address
range)
Adds hosts, networks or address ranges whose details will not be sent to the ICAP
server. These items can be deleted from the list at any time.
“Analyzing files” tab
Transferring files
Partial download When a download is incomplete, for example, due to a connection failure during a file
download via HTTP, the user can continue to download from where the error occurred,
instead of having to download the whole file again. This is called a partial download –
the download does not correspond to a whole file.
The option Partial download allows defining the behavior of the firewall’s HTTP proxy
towards this type of download.
l Block: partial downloads are prohibited
l Block if antivirus has been enabled: partial downloads are allowed except if the
traffic corresponds to traffic that is inspected by a rule with an antivirus scan.
l Pass: partial downloads are authorized but there will not be any antivirus scan.
File size limit [0-
2147483647(KB)]
When files downloaded off the internet via HTTP get too huge, they can deteriorate the
internet bandwidth for quite a long stretch of time.
To avoid this situation, indicate the maximum size (in KB) that can be downloaded by
HTTP.
URLs excluded from
the antivirus scan
A URL category or category group can be excluded from the antivirus scan. By default,
there is a URL group named antivirus_bypass in the object database containing
Microsoft update sites.
Page 258/448 sns-en-user_configuration_manual-v3 - Copyright © Stormshield 2016
SNS - USER CONFIGURATION MANUAL V.3
PROTOCOLS
To Next Page
Loading...
