ICAP Options
ICAP Options
EFT v8.0.5 and later support the use of ICAP Options method. The ICAP "OPTIONS" method is used by the ICAP client to retrieve configuration information from the ICAP server. In this method, the ICAP client sends a request addressed to a specific ICAP resource and receives back a response with options that are specific to the service named by the URI. All OPTIONS requests MAY also return options that apply to all services.
Wireshark capture of OPTIONS RESPMOD from Clearswift:
OPTIONS icap://192.168.100.79:1344/policy_service_resp ICAP/1.0
Host: 192.168.100.79
ICAP/1.0 200 OK
Server: Traffic Spicer 2.4.0
ISTag: "CSICAP/v2.4.0/cd7ac05/CSAdapter"
Methods: RESPMOD
Preview: 0
Allow: 204
Max-Connections: 980
Transfer-Preview: *
Encapsulated: null-body=0
X-Include: X-Client-IP, X-Server-IP, X-Authenticated-User, X-Authenticated-Groups
Wireshark capture of OPTIONS REQMOD from Kaspersky:
OPTIONS icap://192.168.100.81:1344/av/reqmod ICAP/1.0
Host: 192.168.100.81
ICAP/1.0 200 OK
ISTag: "KAVPROXY"
Date: Fri, 05 Feb 2021 20:53:22 GMT
Methods: REQMOD
Allow: 204
Service: KAV-ICAP-Sever/5.5
Preview: 0
Max-Connections: 5000
Service-ID: KAVIcap
X-Include: X-Client-IP
Transfer-Preview: *
Transfer-Ignore:
Options-TTL: 300
Encapsulated: null-body=0
Wireshark capture of OPTIONS RESPMOD from Symantec:
OPTIONS icap://192.168.100.82:1344/RESPMOD ICAP/1.0
Host: 192.168.100.82
ICAP/1.0 200 OK
ISTag: "Vontu14.5"
Methods: RESPMOD
Options-TTL: 3600
Preview: 0
Transfer-Preview: *
Allow: 204
X-Include: X-Client-IP, X-Authenticated-User
Encapsulated: null-body=0
Max-Connections: 16