Installation manual
19
cache_peer192.168.1.10parent80800no-query
prefer_directoff
To reread the newly created con guration, reload the ESETS daemon.
5.3. Internet Content Adaptation con guration
The Internet Content Adaptation is a well known method aimed at providing object-based
content vectoring for HTTP services. It is based on the Internet Content Adaptation Protocol
(ICAP) described in the RFC-3507 memo. Con guration for integrating the ICAP services is shown
in Figure 5-3:
Figure 5-3. Scheme of ESET Gateway Security as a ICAP server.
The Proxy Cache receives the HTTP request from the User Agent and/or the response from
the HTTP server and then encapsulates the message into the ICAP request. The Proxy Cache must
also work in this case as the ICAP client and pass the ICAP request for the message adaptation to
ESET Gateway Security, namely to a generic ESETS ICAP server - esets_icap. The module provides
scanning of the encapsulated message body for in ltration. Based on the scanning result, it then
provides an appropriate ICAP response which is sent back to the ICAP client, or to the Proxy
Cache, for further delivery.
To con gure ESET Gateway Security to scan HTTP messages which are encapsulated in ICAP
requests, enter the command:
/usr/sbin/esets_setup
Follow the instructions provided by the script. When the 'Available installations/un-
installations' o er appears, choose the 'ICAP' option to display the ‘install/uninstall’ options.
Choose ‘install’ to automatically con gure the module to listen on a prede ned port and reload
the ESETS daemon service.
In default mode, the installer shows all steps which will be performed and also creates a
backup of the con guration, which can be restored later at any time. The detailed installer utility
steps for all possible scenarios are also described in appendix A of this documentation.
chapter 5 Integration with Internet Gateway services
Client
User Agent User Agent User Agent
ClientClient
Gateway
Local Network
ESET Gateway
Security
INTERNET
Proxy
Cache
ICAP
client