Dr.Web ICAPD

The Dr.Web ICAPD component connects to an HTTP proxy server (such as Squid) via ICAP. The server is installed on a gateway that is used by LAN users to access the internet. The proxy server uses Dr.Web ICAPD as an external filter analyzing both user requests and server responses to these requests. If user access to any resource located on the external network must be blocked, or transmitted data (a user request or a server response) contains a threat or cannot be scanned because of an error, Dr.Web ICAPD instructs the proxy server to return a special HTML page generated by Dr.Web ICAPD from a template to the user.

If file scanning via HTTP is highly intensive, issues with scanning may arise when available file descriptors are depleted by the Dr.Web Network Checker component. In this case, it is necessary to increase the limit by the number of file descriptors available to Dr.Web Gateway Security Suite.

 

 

Details:

Operating Principles

Command-Line Arguments

Configuration Parameters

HTTP Message Processing in Lua

Integration with Squid Proxy Server