- Products
- Learn
- Local User Groups
- Partners
-
More
Celebrate the New Year
With CheckMates!
Value of Security
Vendor Self-Awareness
Join Us for CPX 360
23-24 February 2021
Important certificate update to CloudGuard Controller, CME,
and Azure HA Security Gateways
How to Remediate Endpoint & VPN
Issues (in versions E81.10 or earlier)
Mobile Security
Buyer's Guide Out Now
Important! R80 and R80.10
End Of Support around the corner (May 2021)
Hello all, anyone could share a configuration example about using R80.20 as a client ICAP for a Web Prevent Symantec DLP Server?
when I Trying the gateway doesn´t understand a message to block came from DLP server.
Thanks.
Regards.
Hello Dameon, do you have a configuration (example) to share? I have a DLP server Symantec WEB Prevent version 15.x, SMS R80.20 M2 and two gateways r80.20 take 33 using Cluster high availability,
When my DLP server respond an ICAP request message from my gateway (in REQMOD) the body message came with a html format explain the block ocurred and my gateway does not show the page. I tried change the parameter to show block message or not show block message... but didn´t work.
**parameter user_check_interaction_name is correct.
# vi icap_client_blade_configuration.C
(
:enabled ("true")
:filter_http_method (
: (
:method ("POST")
)
)
:http_services (
: (
😛ort (8080)
)
)
:inspect_html_response ("true")
:user_check_interaction_name ("Bloqueio de Aplicativo")
:trickling_mode (0)
:log_level (1)
:icap_servers (
: (
:name ("DLP_Symantec")
:ip ("10.100.1.190")
:ip6 ("")
😛ort (1344)
:service ("reqmod")
😛roto ("icap")
:modification_mode ("reqmod")
:transp ("3rd_cpas")
:failmode (open)
:timeout (61)
:max_conns (100)
:user_check_action (2)
:x_headers (
:x_client_ip ("true")
:x_server_ip ("true")
:x_authenticated_user ("true")
:authentication_source ("Local")
😛ase64_username_encode ("true")
)
)
)
:rules_type ("include")
:network_filter_rules_ip4 (
: (
:src_ip_ranges (
: (
:min_ip ("10.100.41.105")
:max_ip ("10.100.41.106")
)
)
:dst_ip_ranges (
: (
:min_ip ("any")
:max_ip ("any")
)
)
)
)
:network_filter_rules_ip6 (
: (
:src_ip_ranges (
: (
:min_ip ("")
:max_ip ("")
)
)
:dst_ip_ranges (
: (
:min_ip ("")
:max_ip ("")
)
)
)
)
)
Thanks
ok, thank you.
yes, using r80.20 take 74
About CheckMates
Learn Check Point
Advanced Learning
WELCOME TO THE FUTURE OF CYBER SECURITY