Kaspersky Anti-Virus 5.5 for Proxy Server

 
 
 

ICAP protocol error when opening certain pages

ID: 2723
Complexity
2012 May 12
 
 
 
 

Applies to Kaspersky Anti-Virus 5.5 for Proxy Server MP1 

ICAP protocol errors may occur in the result of opening certain websites when Kaspersky Anti-Virus is working with Squid 3.0:


It may happen if the function to scan REQMOD requests (e.g. sending mail via web interface) with antivirus is enabled in Squid configuration. In this case, REQMOD requests sent to certain resources may cause such an error.


This issue can be resolved in two ways:

  1. Disable scanning of REQMOD requests in Squid. To do it, open Squid configuration file (squid.conf) and make the following changes:
    • comment the string icap_service is_kav_req reqmod_precache 0 icap://localhost:1344/av/reqmod
    • remove the entry is_kav_req from ICAP class descriptions(icap_class).


      InformationIf you choose this method, the traffic containing REQMOD requests will not be scanned for viruses.


  2. If you want the traffic containing REQMOD requests to be scanned for viruses, disable the function Preview instead. To do it, change the setting icap_preview_enable to off in Squid configuration file.


    InformationIf you choose this method, you might experience a slow-down in traffic processing speed.
 
 
 
 
Did the provided info help you?
Yes No