Showing results for 
Search instead for 
Did you mean: 
Level 7

ICAP preview option

Is there any possibility to turn off (default is on) the preview information sending from MWG 7.X to the external DLP solution?

0 Kudos
1 Reply
McAfee Employee

Re: ICAP preview option

Hi Konrad,

in general, the DLP solution is the ICAP server. In ICAP, the server tells the client what the client should do. To figure this out, the client asks the server with a so called OPTIONS request. The server then replies with an OPTIONS response. Here is an example from our nDLP Prevent solution:

McAepfelchen:tmp michaelschneider$ telnet 1344


Connected to

Escape character is '^]'.

OPTIONS icap:// ICAP/1.0

ICAP/1.0 200 OK

Date: Thu, 01 Sep 2011 13:14:12 GMT

ISTag: "McAfee-010406-2011-132e350"

Methods: REQMOD

Service: Reconnex iGuard ICAP Server 1.0

Options-TTL: 3600

Max-Connections: 4096

Preview: 4096

Allow: 204

Transfer-Preview: *

Encapsulated: null-body=0

X-Include: X-Client-IP, X-Server-IP, X-Authenticated-User

From this we learn that the ICAP server needs to be set to send a 0 preview to the client to disable preview. MWG is fully ICAP compliant ad therefore will respect what the servers tells it.



0 Kudos