Dr.Web ICAPD

The Dr.Web ICAPD component connects to an HTTP proxy server (such as Squid) via the ICAP protocol. Typically, an HTTP proxy server is installed on a server (gateway) that is used to provide Internet access to LAN users. The proxy server uses Dr.Web ICAPD as an external filter. Thus, Dr.Web ICAPD analyzes user requests and server responses to these requests. If user access to any resource located on the external network must be forbidden, or transmitted data (a user request or a server response) contains a threat or cannot be scanned because of an error, Dr.Web ICAPD instructs the proxy server to return a special HTML page to the user, which is generated by Dr.Web ICAPD from a template.

In case of high intensity of the scanning of files transferred via the HTTP protocol, there is a possibility of having problems with scanning due to depletion of the number of available file descriptors by the Dr.Web Network Checker component.. In this case, it is necessary to increase the limit of the number of file descriptors available to Dr.Web for UNIX Internet Gateways.

Details:

•Operating Principles

•Command Line Arguments

•Configuration Parameters

•Integration with HTTP Squid Proxy Server