Users experience delays in web browsing in ProxySG or Advanced Secure Gateway deployment

Products

• Content Analysis Software - CA
• Advanced Secure Gateway Software - ASG
• ProxySG Software - SGOS

Issue/Introduction

Users experience delays in web browsing. ICAP scanning is configured on the ProxySG or Advanced Secure Gateway (ASG).

Resolution

Slow scanning is the most likely caused by Content Analysis attempting to virus scan infinite streams. Infinite streams are connections which deliver ongoing streams of data to the client such as a stock ticker web application or online music or video streaming service. To avoid this problem, Symantec recommends enabling deferred scanning.

To enable deferred scanning, you edit the ICAP service.

1. Log in to the ProxySG or ASG Management Console

2. Edit the ICAP service.

   1. Select Configuration > Content Analysis > ICAP > ICAP Services

   2. Select the ICAP service

   3. Click Edit. The Edit ICAP Service window opens

3. Enable scanning deferral

   1. Select Defer scanning at threshold to enable the defer scanning feature

   2. Enter a value (0-100) to set the threshold at which the ProxySG or ASG defers the oldest ICAP connection that has not yet received a full object. For example, if the maximum connections are set to 100 and you set the defer threshold to 65 percent, then up to 65 connections are allowed before the ProxySG or ASG begins to defer connections that have not finished downloading a complete object.

   3. Click OK to close the Edit ICAP Service window

   4. Click Apply

To learn how deferred scanning works, see this article: How does deferred scanning work?