ICAP URL for Symantec DLP Web Prevent

[habibndao491]

Hello

Does anyone know the ICAP URL to use in the S370 for sending data to a Symantec Network Prevent for Web service?

[shgrover]

Hello  habibndao491 ,

you can use the hostname of Symantec server as the service URL just make sure that the url begins with "icap://syamntec-hostname". you would need to upload the server certificate from Symantec here so that the WSA trusts the Symantec server.

Regards

Shikha Grover

PS: Please don't forget to rate and select as validated answer if this answered your question

[Ceez]

how well do I understand by icap protocol I'll only see http incidents?even though my ironport (WSA) decrypts the https traffic?