ICAP header if file will be analysed

[tomhans18]

Hello there,

currently we have multiple 3rd party applications which should send files through ICAP to the SandBlast and wait for the response.

By design this is not possible. If the file is not directly denied by the SandBlast it will be handled as accepted, this is the nature of the ICAP protocol as far as I know.

Now I saw that some Sandbox providers offers the possibility to add an additional ICAP response header which informs that the file needs to be scanned and I like to know if this is possible with the SandBlast too?

This would be amazing because we could create something like a ICAP proxy to evaluate the header and send another response.

Thank you for your help.

tomhans18