Enabling or disabling the ICAP service

Prev Next

Enabling and configuring the ICAP service on a Intelligent Virtual Execution - Server appliance enables the appliance to act as an ICAP server, performing signature and callback detection and malware analysis on ICAP-encapsulated data from a proxy server running an ICAP client.

Note

The ICAP service is disabled by default.

You can enable or disable the ICAP service by using the CLI:

  • icap-service enable — This command enables the ICAP functionality on IVX.

    Note

    In a standard cluster, you would enable ICAP service on the single broker node that your ICAP client is configured to connect to. When using a Virtual IP (VIP) for a High Availability (HA) cluster, you must enable the ICAP service on all broker nodes participating in the cluster. ICAP clients connect to the single VIP. Enabling the service on all brokers ensures that if the active node fails, any standby node can take over the VIP and continue processing ICAP traffic without interruption.

    For more information, see Configuring automatic failover using a Virtual IP.

  • no icap-service enable — This command disables the ICAP functionality on IVX.

  • icap-service respmod enable — This command enables the processing of response mode ICAP data.

  • no icap-service respmod enable — This command disables the processing of response mode ICAP data.

  • icap-service reqmod enable — This command enables the processing of request mode ICAP data.

  • no icap-service reqmod enable — This command disables the processing of request mode ICAP data.