4 Replies Latest reply on Feb 2, 2011 10:43 AM by eelsasser

    Bypass ICAP Server in MWG 6.8.7

    gwieser

      Hello!

       

      Is it possible in MWG 6.8.7 to bypass the ICAP server for hostnames based on a regex? We want to bypass the ICAP service for simple hostnames, for example http://smile (it's not fully qualified) because we are routing all http/https/ftp-traffic via proxy.pac to the  MWGs and want to bypass content filtering for internal hosts.

       

      My first try was to define ([A-Za-z0-9_-]+) but this didn't work.

       

      Any help will be appreciated.

       

      TIA

      Gerhard

        • 1. Re: Bypass ICAP Server in MWG 6.8.7

          Why don't you simply bypass proxying to simple  hostnames in the proxy.pac file instead?

           

          You can do this by the function:

          if (isPlainHostName(host)) { return DIRECT; }

           

          This is what most people do.

          • 2. Re: Bypass ICAP Server in MWG 6.8.7
            gwieser

            Hi Erik!

             

            That's what we do today.

             

            But we have to separate our test-environment from the development-environment. So in the future we will have two different zones protected by a firewall and the MGW will be the central communication gateway between the two zones. Only the MGW will be allowed to contact the services in the test-environment. Unfortunately there are some common  services in the test-environment which should be reached by the short name, i.e. http://smile

             

            Gerhard

            • 3. Re: Bypass ICAP Server in MWG 6.8.7

              The shell expression patterns in MWG 6.8 are limited. They don't behave like regex.

              Version 7 has the ability to do that very easily because you can apply rules to just the URL.Host itself and not the whole URL (scheme://host:port/path?parameters)

               

              I can't see an easy way to isolate a host with no periods in the name without it scanning the entire path, other than putting specific hosts into the ICAP bypass list itself.

               

               

              Message was edited by: Erik Elsasser on 2/2/11 10:43:55 AM CST
              1 of 1 people found this helpful
              • 4. Re: Bypass ICAP Server in MWG 6.8.7
                gwieser

                Hi!

                 

                Thank you for the information although I've hoped for better news. Well, so I'm trying to get a list of all those services and define them by the usual way.

                 

                G.