ICAP TEST HOW TO

Save the file with and appropriate name.

ICAPD version: KL ICAP Service v1.0 (KAV SDK v8.5.1.83) The response template contains the following information about the blocked web page: When the web page is blocked, the kavicapd service returns the detect_req HTML response template.

Verify that the test web page was blocked.

The kavicapd service will answer with the modified message headers and a response message that shows information about the blocked URL.

ICAP TEST HOW TO

This example shows how to send the message using netcat:Д¬at icap_reqmod_malicious_detect_.txt | nc localhost 1344 The exact method may vary depending on the operating system. Send the message to the port that the kavicapd service listens on (port 1344 by default).

In the following example this file is named icap_reqmod_malicious_detect.txt.

Save the file with an appropriate name.

This message requests a test page that does not contain any real malicious content. This is a REQMOD GET ICAP request message. Also, make sure that the file ends with an empty line (a line consisting of CRLF symbols). Make sure that every line ends with CRLF, as required by RFC 2616. Set the value of the RulesFilePath parameter to the directory that contains kavicapd_gui_nf, sample service rules file that is included in the distribution kit.

Make sure that the directory with response templates contains the detect_req default template.

To verify that Kaspersky Scan Engine detects malicious URLs correctly: Verifying that Kaspersky Scan Engine detects malicious and phishing URLs correctly This section explains how to verify that Kaspersky Scan Engine works correctly in ICAP mode. Verifying detection capabilities in ICAP mode

Icap test