Error reading ICAP request headers

book

Article ID: 160361

calendar_today

Updated On:

Products

Data Loss Prevention Network Prevent for Web

Issue/Introduction

If McAfee Web Gateway 7.1.6 is being used as a Proxy and AD Groups are enabled on it, end users may experience performance issues (web pages opening very slow or sometimes not able to browse internet) while browsing internet.

FileReader.log on Network Prevent for Web may have following Warning :

"WARNING: On ICAP connection ID=15982 unrecoverable error: Error reading ICAP request headers. Closing this connection."

Additionally, the McAfee Web Gateway may also show following Error Message :

"(16002) ICAP Client filter error: ICAP server send bad response"

Product Version : 11.6.0

OS: Windows Server 2008 R2 Standard Edition x64

Resolution

1) In the Server Settings for Network Prevent for Web, increase the value of ICAP.BufferSize from 3k (default) to 5k.

2) Clear and re-create the AD Groups on the McAfee Web Gateway.