Configuring the ICAP client

ICAP can be used with any version of Forcepoint DLP. The direct interface is recommended, however, when the policy engine is on the Content Gateway machine. See Registering Content Gateway with Forcepoint DLP.

Note:

A secondary ICAP server can be specified as a failover should the primary server fail.

The primary and secondary can also be configured to perform load balancing.

See ICAP failover and load balancing, below.

To configure integration with ICAP:

Steps

  1. Go to the Configure > My Proxy > Basic > General tab in the Content Gateway manager.
  2. Under Networking > Integration, change Integration to On, then select ICAP.
  3. Click Apply, and then click Restart.
  4. Navigate to the Configure > Networking > ICAP > General tab.
  5. In the ICAP Service URI field, enter the Uniform Resource Identifier (URI) for the primary ICAP service, followed by a comma (no space) and the URI of the secondary ICAP service. A secondary ICAP service is optional.

    Enter the URI in the following format:

    icap://<hostname>:<port>/<path>

    • <hostname> is the IP address or hostname of the Forcepoint DLP Protector appliance.
    • The default ICAP port is 1344.
    • <path> is the path of the ICAP service on the host machine. For example:

    icap://protector_app:1344/reqmod

    You do not need to specify the port if you are using the default ICAP port.

  6. Under Analyze HTTPS Content, indicate if decrypted traffic should be sent to Forcepoint DLP for analysis or sent directly to the destination. The HTTPS protocol option must be enabled to send HTTPS traffic to Forcepoint DLP. See Working With Encrypted Data.
  7. Under Analyze FTP Uploads, select whether to send FTP upload requests to Forcepoint DLP for analysis. The FTP proxy feature must be enabled to send FTP traffic to Forcepoint DLP. See FTP.
  8. Under Action for Communication Errors, select whether to permit traffic or send a block page if Content Gateway encounters an error while communicating with your data protection solution.
  9. Under Action for Large Files, select whether to permit traffic or send a block page if a file larger than the size limit specified in your data protection solution is sent. The default size limit for Forcepoint DLP is 50 MB.
  10. Click Apply.
    Note: If you change the URI, you must restart Content Gateway. Other changes do not require a restart.