ICAP URL for Symantec DLP Web Prevent?

[Chris Gillham]

Does anyone know the ICAP URL to use in the S370 for sending data to a Symantec Network Prevent for Web service?

[Ken Stieers]

Chris,

I'm pretty sure its

     icap://:1344

ex.

     icap://dlp.corp.root:1344

or

     icap://10.10.10.5:1344

Ken

[Chris Gillham]

Thanks for the reply, Ken.  I think I found it after my post.  I believe it is icap://:1344/reqmod.

   Chris

[Chris Gillham]

This is working for us now.

The ICAP DLP server entry in our Ironports looks like this for us.

: 1344, icap://:1344/reqmod

We are using S370's talking to Symantec Network Prevent Web virtual servers for DLP inspection.

Thanks,

   Chris