I am wondering if ATD can be used as ICAP server.
First, here is how I use ATD : the Network Security Platform IPS send the file to be inspected to the primary ATD load-balancing VIP.
Then the file is analysed by the ATD and a severity score is submitted.
Can the ATD be used as ICAP server with the McAfee Web Gateway proxy as client ?
Thanks in advance
Solved! Go to Solution.
Thank for replying
By "MWG has a native integration" , you mean that the proxy MWG has the possibility to transfer the file, downloaded from Internet by an end-user from the enterprise information system, to an integrated ICAP McAfee server ?
MWG will transfer the file to ATD, but it doesn't do so via ICAP. I think it uses the ATD API to do it direct, not ICAP.
So a user can download the file.. you select the policy in MWG whether you want MWG to wait for analysis or allow the user to download it in parallel to the anlaysis. The file goes to ATD, ATD checks it for malicious behavior.