Configuring the ICAP client

ICAP can be used with any version of TRITON AP-DATA or Websense Data Security, however the direct interface is recommended when the policy engine is on-box with Content Gateway. See Registering and configuring TRITON AP-DATA.

ICAP must be used for inter-operation with Data Security Suite versions 7.1 and earlier.


	Note A secondary ICAP server can be specified as a failover should the primary server fail. The primary and secondary can also be configured to perform load balancing. See ICAP failover and load balancing, below.

To configure integration with ICAP, log on to the Content Gateway manager and go to Configure > My Proxy > Basic > General.

In the Networking section of the Features table, select Web DLP On and then ICAP.

Click Apply, and then click Restart.

Navigate to Configure > Networking > ICAP > General.

In the ICAP Service URI field, enter the Uniform Resource Identifier (URI) for the primary ICAP service, followed by a comma (no space) and the URI of the secondary ICAP service. A secondary ICAP service is optional.

icap://hostname:port/path

For hostname, enter the IP address or hostname of the Websense Data Security Suite Protector appliance.

The default ICAP port is 1344.

Path is the path of the ICAP service on the host machine.

For example:

icap://ICAP_machine:1344/reqmod

You do not need to specify the port if you are using the default ICAP port 1344. For example, the above URI can also be entered without the default port:

icap://ICAP_machine/reqmod

Under Analyze HTTPS Content, indicate if decrypted traffic should be sent to your Websense data protection solution for analysis or sent directly to the destination. The HTTPS protocol option must be enabled to send HTTPS traffic to your Websense data protection solution. See Working With Encrypted Data.

Under Analyze FTP Uploads, select whether to send FTP upload requests to your Websense data protection solution for analysis. The FTP proxy feature must be enabled to send FTP traffic to your Websense data protection solution. See FTP.

Under Action for Communication Errors, select whether to permit traffic or send a block page if Content Gateway encounters an error while communicating with your Websense data protection solution.

Under Action for Large Files, select whether to permit traffic or send a block page if a file larger than the size limit specified in your Websense data protection solution is sent. The default size limit for TRITON AP-DATA and Data Security Suite version 7.0 and later is 12 MB.

Click Apply.


	Note If you change the URI, you must restart Content Gateway. Other changes do not require a restart.