DLP - Poor ICAP Agent performance
Article ID: 50553
Updated On:
Products
Issue/Introduction
Description:
To maximize performance for integration of CA DLP with ICAP (Internet Content Adaptation Protocol) clients on proxy servers such as Blue Coat ProxySG and Squid, the system should be suitably configured.
Solution:
Some areas of consideration when improving performance on BlueCoat are Monitoring and Routing:
Monitoring
The ICAP Response Service (respmod) monitors all incoming traffic, i.e. responses from the web server, and this can degrade performance. If monitoring of incoming traffic is not required, it is advised that the ICAP Response Service (respmod) is disabled.
Routing
Performance can be improved by ensuring that only data that needs policy applied is passed to the CA DLP ICAP Agent. For example, the BlueCoat policy can be modified to filter out image or javascript files, which DLP cannot interact with.
For other considerations please reference the relevant ICAP (Internet Content Adaptation Protocol) client documentation.
Environment
Component:
Feedback
