The ICAP connector is used to communicate over the Internet Content Adaptation Protocol (ICAP). In Cleo Harmony's case, ICAP is used for streaming inbound files through an anti-virus scanner.
After filling in the required ICAP properties, use the connector's <send> action to pre-test both infected and non-infected files. A harmless "infected" file can be found here: http://www.eicar.org/85-Download.html
To enable antivirus scanning of incoming files:
- Activate the Standalone Actions>Antivirus Scan action.
- Within the Antivirus Scan action, change the scanner, errorMessage, and includeScanErrorMessage parameters as necessary. These parameters are described within the action, as well as what happens when a scan fails.
- Keep the action as Automatically Run at Startup, as the action needs to register an incoming filter for subsequent inbound files. You can also run the action interactively to register the filter or re-register a modified filter.
- If you are setting up ICAP for a Harmony cluster, you must run the Antivirus Scan action manually on each node in the cluster or restart each node.
- Disabling or deleting the Antivirus Scan action will disable or delete the filter.
NOTE: The location of the ICAP connector and Antivirus Scan action in relation to the partner hosts dictates which incoming payload is in-scope and scanned. For more information, refer to Standalone Actions in the Cleo Harmony Online User Guide.
ICAP Connector Properties
Each instance of the ICAP Connector can be configured using the following settings:
| Property | Description | Required |
|---|---|---|
| Address | The host server connection address. | Yes |
| Port | The host server connection port. Valid range: [1-65535]. |
Yes |
| ICAP Service | The name of the antivirus service on the ICAP server. | Yes |
| Response Profile | The response header returned when an infection is found. | Yes |
| Override Transfer Ignore | If enabled, the 'Transfer-Ignore' response header is ignored and all files are sent to the ICAP server for scanning regardless | |
| Maximum Size | A positive integer value limits the maximum content size (in bytes) to be sent to the ICAP server post-preview. Any other value implies no limit. | Yes |
| Request Method | The ICAP request method to use. The default value is RESPMOD. | |
| Command Retries | The number of times the command should be retried when an error or exception occurs. Valid range: [0-5]. |
Yes |
| Command Retry Delay (seconds) |
The number of seconds to wait between retries. |
Yes |
| Do Not Send Zero Length Fies | For PUT, a switch that controls whether to send a file if it is zero-length. | |
| Enable Debug | A switch that controls whether to perform debug logging. | |
| System Scheme Name | The URI scheme name used as a shortcut to this host. Valid pattern: [[a-zA-Z){1}[a-zA-Z0-9+\-\.]{ 1,23}]. |
|
| System Public | A switch that indicates whether the connector is public. |
Comments
0 comments
Please sign in to leave a comment.