Installation guide

Deployment Primer
2-23
Deploying in WCCP Mode
Note: For advanced information on deploying in WCCP mode, see the IWSVA 6.5
Administrator's Guide, “Appendix F, WCCP Deployment & Troubleshooting.”
HTTP Proxy in WCCP Mode (Single and Multiple IWSVA
Servers)
IWSVA configured in the WCCP Mode processes Web page requests in the following
sequence:
1. The Web client sends a request to the Web server.
2. The router intercepts the request and forwards the request to IWSVA.
3. IWSVA establishes a connection with the Web client.
4. IWSVA forwards the client requests to the Web server and establishes a connection
with the Web server.
5. IWSVA begins sending data between the Web client and the Web server.
6. If the data has no virus, then IWSVA sends the data to the Web client.
7. If the data has a virus, then IWSVA sends the blocked page to the Web client.
Deploying in ICAP Mode
Overview of ICAP Mode
Internet Content Adaptation Protocol (ICAP) is designed to forward an HTTP
response or request to third-party processors and collect the results. The component
that sends the ICAP request is called the ICAP-client. A component that processes the
request is called an ICAP-server.
When IWSVA is configured in ICAP mode, it processes requests from any
ICAP-compliant client. Officially, Trend Micro supports the following ICAP version 1.0
implementations: NetCache, Blue Coat, Cisco Content Engines (CE), and Squid.