Configuring ICAP Servers

You configure ICAP servers at the security-policy icap-server level.

To create an ICAP server, use the following command:

Admin@nodename# create security-policy icap-server <parameter>

Available parameters:

Parameter

Description

name

ICAP server name.

description

ICAP server description.

ip

ICAP server IP address.

port

TCP port of the ICAP server. Default value: 1344.

max-msg-size

Maximum message size sent to the ICAP server (in kilobytes). By default: 0 (the request body will not be transmitted to the ICAP server).

check-icap

Period to check ICAP server availability.

bypass

If enabled, UserGate will not send data to the ICAP server when the server is unavailable.

reqmod-path

Use Reqmod:

  • <text> --- set the directory path on the ICAP server.

  • off: disable Reqmod mode.

respmod-path

Use Respmod:

  • <text> --- set the directory path on the ICAP server.

  • off: disable Respmod mode.

user-header

Set sending of the user name to the ICAP server:

  • <text> --- specify the header name in which the username will be sent to the ICAP server.

  • off: do not send the username to the ICAP server.

user-encode

Specify if the username is in Base64 encoding:

  • on

  • off

ip-header

Specify whether the user's IP address should be sent to the ICAP server:

  • <text> --- specify the header name in which the user's IP address will be sent to the ICAP server.

  • off: do not send the user's IP address to the ICAP server.

mac-header

Specify whether the user's MAC address should be sent to the ICAP server:

  • <text>: specify the header name in which the user's MAC address will be sent to the ICAP server.

  • off: do not send the user's MAC address to the ICAP server.

To update an existing ICAP server, use the following command:

Admin@nodename# set security-policy icap-server <server-name> <parameter>

The parameters available to update are the same as those used to create an ICAP server.

To display information about an ICAP server, use the following command:

Admin@nodename# show security-policy icap-server <server-name>

To delete an ICAP server, use the following command:

Admin@nodename# delete security-policy icap-server <server-name>