Configuring ICAP Service

Before you begin

Applies to:
  • Forcepoint URL Filtering, v8.5.x

ICAP Service behavior can be customized by modifying a configuration file called icap.conf, located in the bin directory (C:\Program Files\Websense\Web Security\bin, or /opt/Websense/bin/, by default) on the ICAP Service machine.

The icap.conf file can include the following parameters. Options marked with an asterisk appear in the file by default. The others can be added to the file if needed.

Parameter Description Default Value
WebsenseServer* IP address of the Filtering Service instance associated with a ICAP Service instance 127.0.0.1
WebsenseServerPort Filtering Service port used for WISP communication 15868
icapPort* ICAP Service listening port 1344
icapServiceName* Name of the ICAP service. Appears in the URL configured in the ICAP client. For example:

icap://<ip_address>/<name>

 icap
maxConnections* Maximum number of ICAP server connections, and maximum number of connections from the ICAP server to Filtering Service. 200
optionsTTL* Sent to the ICAP client in response to an OPTIONS request. The next OPTIONS request is sent after this number of seconds. 3600
serverIPEnabled Sent to ICAP client in response to OPTIONS request. If TRUE, client should send the X-Server-IP field. TRUE
failClosed* If there are errors in the Filtering Service responses, should the request be blocked (fail closed) or permitted (fail open). TRUE
connectionTimeout* Number of minutes before a connect times out (expires) 5

To update the ICAP Service configuration:

Steps

  1. Navigate to the bin directory (path noted above) and open icap.conf in a text editor.
  2. Edit an existing parameter, or add a blank line at the end of the file and enter the parameter that you want to configure.
  3. Save and close the file.
  4. Restart Websense ICAP Service.