topic ICAP URL for Symantec DLP Web Prevent? in Web Security

ICAP URL for Symantec DLP Web Prevent?

Chris Gillham — Mon, 05 Dec 2011 20:51:40 GMT

Does anyone know the ICAP URL to use in the S370 for sending data to a Symantec Network Prevent for Web service?

Ken Stieers — Tue, 06 Dec 2011 01:37:40 GMT

Chris,

I'm pretty sure its

icap://:1344

ex.

icap://dlp.corp.root:1344

icap://10.10.10.5:1344

Ken

Chris Gillham — Tue, 06 Dec 2011 14:52:38 GMT

Thanks for the reply, Ken. I think I found it after my post. I believe it is icap://:1344/reqmod.

Chris

Chris Gillham — Wed, 04 Jan 2012 20:27:02 GMT

This is working for us now.

The ICAP DLP server entry in our Ironports looks like this for us.

: 1344, icap://:1344/reqmod

We are using S370's talking to Symantec Network Prevent Web virtual servers for DLP inspection.

Thanks,

Chris