M86 Security SWG, User Manual

Page: 80 / 134

S W G U s e r G u i d e
Chapter 15: Implementing ICAP 80
d. In the Health Check URL field, specify the URL to which the SWG scanner sends health check
requests through the ICAP Service to ensure that the ICAP Service server is alive, or up and
running.
e. Specify the In the Expected Return Code field, specify the return code expected from the Health
Check URL. If this return code is received it is an indication that the ICAP Service is alive.
4. Fill in the Advanced tab, as follows:
a. In the Connection Timeout field, specify the maximum number of seconds to wait for a
health check connection to be established. Default: 60.
b. In the I/O Timeout field, specify the maximum number of seconds to wait for completion of
a health check transmission. Default: 30.
5. When done, click Save .
6. If you are ready to distribute and implement the changes in your system devices, click .
Defining ICAP Services
Â
To define an ICAP Service
1. Select Policies
Æ
Condition Settings
Æ
ICAP Service Groups .
2. Do either of the following:
• To create an ICAP Service, right click the node of the ICAP Service Group to which the ICAP
service should be added, and choose Add Service . The main window for defining the ICAP
Service is displayed.
• To edit an existing ICAP Service, select the service node, and in the main window click Edit .
The ICAP Service window is displayed.
3. Perform the following steps in the ICAP Service window.
1. Specify a name for the service.
2. To enable use of this external ICAP Service, ensure that the
Enable ICAP Service checkbox is
selected.
3. In the URL field, specify the URL of the ICAP Service and Server, as follows:
a. In the first entry field ( icap:// ), specify the address of the server hosting the ICAP
service.
b. In the second entry field, following the “ : ”, specify the port on which the ICAP Service is
listening.
c. In the third entry field, following the “ / ”, specify the URL of the ICAP Service on the
hosting server. For example: icap://10.10.10.10:1344/Finjan_REQMOD
4. To perform discovery of the ICAP Service’s Connection Items through a particular scanner, do the
following in the Scanner area. For more information on Discovery, see the Management Console
Reference Guide :
a. In the Scanner field, select the scanner device through which discovery should be performed.
NOTE: These requests are sent at the interval defined in the Keep Alive tab in the ICAP Client
module.
NOTE: You do NOT have to commit the ICAP Service Group before using it in an ICAP
Forward policy rule.