1 Reply Latest reply on Sep 1, 2011 8:16 AM by michael_schneider

    ICAP preview option

      Is there any possibility to turn off (default is on) the preview information sending from MWG 7.X to the external DLP solution?

        • 1. Re: ICAP preview option

          Hi Konrad,


          in general, the DLP solution is the ICAP server. In ICAP, the server tells the client what the client should do. To figure this out, the client asks the server with a so called OPTIONS request. The server then replies with an OPTIONS response. Here is an example from our nDLP Prevent solution:


          McAepfelchen:tmp michaelschneider$ telnet 1344


          Connected to

          Escape character is '^]'.

          OPTIONS icap:// ICAP/1.0


          ICAP/1.0 200 OK

          Date: Thu, 01 Sep 2011 13:14:12 GMT

          ISTag: "McAfee-010406-2011-132e350"

          Methods: REQMOD

          Service: Reconnex iGuard ICAP Server 1.0

          Options-TTL: 3600

          Max-Connections: 4096

          Preview: 4096

          Allow: 204

          Transfer-Preview: *

          Encapsulated: null-body=0

          X-Include: X-Client-IP, X-Server-IP, X-Authenticated-User


          From this we learn that the ICAP server needs to be set to send a 0 preview to the client to disable preview. MWG is fully ICAP compliant ad therefore will respect what the servers tells it.