How to create an DLP REQMOD ICAP Policy
Article ID: 166373
Updated On:
Products
Issue/Introduction
How to create a DLP ICAP Request (REQMOD) policy that only scans what is needed.
What is request modification (REQMOD) useful for?
Resolution
A Request modification is normally used to send outgoing request to a DPL server, if configure to scan all requests it can cause performance issues.
To create a ICAP Request modification policy in VPM follow the steps below.
1. Create a Web access layer.
a. Select Policy > Web Access Layer.
b. Assign a descriptive name to the layer (for example, DLP).
c. Click OK.
2. Create an HTTP/HTTPS service object for the request policy.
a. Right-click the Service column; select Set. The Set Service Object dialog displays.
b. Click New.
c. Select Protocol Methods. The Add Methods Object dialog displays.
d. Name the protocol method HTTP and select HTTP/HTTPS from the Protocol list.
e. In the Common methods section, select the POST and PUT checkboxes, and click OK.
3. Create an FTP service object.
a. In the Set Action Object dialog, click New.
b. Select Protocol Methods. The Add Methods dialog displays.
c. Name the protocol method FTP and select FTP from the Protocol list.
d. In the Commands that modify data section, select the STOR checkbox, and click OK.
4. Create a combined (HTTP and FTP) service object.
a. In the Set Action Object dialog, click New.
b. Select the HTTP object and click Add.
c. Select the FTP object and click Add.
d. Click OK.
e. Click OK again to set the Combined Service object as the Web Access Layer service.
5. Set the action for the Request policy.
a. Right-click the Action column and select Set.
b. Click New and select Set ICAP Request Service (renamed "Perform Request Analysis in 6.7 and 7.x"). The Add ICAP Request Service Object dialog appears.
c. Select the DLP ICAP Request service and click Add.
d. Click OK.
e. Click OK again.
6. Install the policy (all layers).
a. Click Install Policy.
b. Click OK.
c. Close the VPM window.
Feedback
