Configuration
Avira GmbH
Avira AntiVir WebGate
24
On login, the FTP Client should be used just as before, i. e. when it was not using
WebGate. WebGate acts as proxy between FTP Client and FTP server and scans the
transferred data.
Optionally, WebGate allows a parent FTP proxy. For example, it can be set in
avwebgate.conf
as follows:
FTPProxyServer 127.0.0.1
FTPProxyPort 2121
In this case, WebGate does not communicate directly to the FTP server, but with
the indicated parent FTP proxy. Thus, more FTP servers can operate consecutively.
In order to avoid Client timeouts during the transfer of larger files, WebGate sends
Keepalive messages to the Client. The time interval is the value of
RefreshInterval
or – if this is 0 – the value of
KeepaliveInterval
.
Furthermore, WebGate sends "NOOP" commands to the server within the
established
KeepaliveInterval
, so that it also maintains the connection to
the server during sending and receiving larger files to or from the Client.
4.3
Integration over ICAP Interface
If there is a caching server with ICAP support in the network, WebGate can be
integrated with the ICAP interface. WebGate can still scan and block incoming
(RESPMOD) and outgoing (REQMOD) files.
X
In
avwebgate.conf
you must set the port, through which WebGate will
communicate with the ICAP Client:
ICAPPort 1344
Scanning Incoming Data Traffic (Response Modification)
The ICAP Client sends an HTTP response for WebGate to scan (ICAP server). If the
data is not infected, it is returned to the ICAP Client and from there forwarded to
the Client. If the answer is blocked (e. g. in case of a virus detection), WebGate
generates an HTML page, based on the corresponding HTML template, and sends
this to the ICAP Client. The page is then forwarded to the Client instead of the
original answer from the server.
Many FTP Clients allow FTP proxy configuration. This enables a certain transparency of
WebGate towards the user, i. e. the user senses no difference at login, when using the FTP
Client with or without proxy.
