ICAP Server

ICAP Features:

• REQMOD
  The ICAP server has a service running in Request Modification Mode (see section 4.8 of RFC 3507)
• RESPMOD
  The ICAP server has a service running in Response Modification Mode (see section 4.9 of RFC 3507)

Filter Services:

• Internet Access Management
  also known as URL Filtering or Content Filtering. Manages which user can visit what kind of Internet sites (usually a REQMOD service)
• Anti Malware
  Filters Internet traffic against all kind of malware, such as viruses, Trojans, worms, spyware, etc. (RESPMOD service for downloaded data and REQMOD service for uploaded data)
• Data Leakage Prevention
  Blocks or filters Internet communication that would reveal private data to the Internet, such as company confidential information, credit card data, etc. (usually a service in REQMOD scanning uploaded data)
• Ad Banner Insertion
  Adds advertisement banners to existing HTML pages with context sensitive product information (a RESPMOD service often running in a reverse proxy deployment)
• Ad Banner Removal
  Removes advertisement banners from web pages, making pages easier to read and reducing bandwidth (a RESPMOD service in a forward proxy deployment)
• Monitoring
  Keeps track of all Internet traffic and provides reports about Internet usage (can be REQMOD and/or RESPMOD, usually not sending data back to ICAP client if possible)
• Other Services
  Any kind of filtering service other than the list above.
• Supports Adaptation Plugins
  Allows 3rd party filtering vendors to write a plugin for this ICAP server and thereby make other filters ICAP supporting; an adaptation plugin SDK exists that 3rd party vendors can work with.
• ICAP Client Test Tool
  A special ICAP server, which is used to test any kind of ICAP client. The test tool reports whether the ICAP client is ICAP specification compliant, verifies its features and/or measures its performance.

ICAP Client

ICAP Features:

• REQMOD
  The ICAP client can vector off HTTP (or other protocol's) request messages to ICAP servers (see section 4.8 of RFC 3507)
• RESPMOD
  The ICAP client can vector off HTTP (or other protocol's) response messages to ICAP servers (see section 4.9 of RFC 3507)
• ICAP for HTTP
  Encapsulated HTTP messages into ICAP and vectors them off to ICAP servers.
• ICAP for HTTPS
  Decrypt/Re-encrypts HTTPS connections and sends the HTTP messages to ICAP servers.
• ICAP for FTP
  Encapsulated FTP messages into ICAP (by translating native FTP transactions into FTP-over-HTTP) and sends those to ICAP servers.
• ICAP for other protocols
  Encapsulated traffic of other protocols into ICAP.
• Support for any Preview size
  Can handle any preview size that an ICAP server requests in its OPTIONS response (including zero size previews and very large previews)
• Allow 204 response at end
  Supports a "204 - not modified" response also at the end of the complete ICAP request (ICAP client sends an "Allow: 204 header", see section 4.6 of RFC 3507)
• ICAP Server load balancing
  The administrator can define multiple ICAP servers hosting the same ICAP service(s); the ICAP client uses some kind of load balancing algorithm to distribute the load across those ICAP servers.
• ICAP Service Chaining
  The administrator can define multiple different ICAP services. An HTTP (or other protocol's) message is sent to the first service and the ICAP response is then sent on to the second service, etc. until the chain of ICAP services has been handled.

Proxy Features:

• User Authentication
  Users can be authenticated against a user database by user name, authenticated user name is provided to the ICAP service thru the X-Authenticated-User header.
• Web Cache
  The ICAP client is a proxy server implementing also a cache for web objects.
• WAN acceleration
  The proxy server is specialized for compressing data at one location and expanding it again on a second location deploying the same gateway product.
• Non-ICAP Content Adaptation
  The proxy server uses also filtering services that are not ICAP enabled.
• ICAP Server Test Tool
  A special ICAP client, which is used to test any kind of ICAP server. The test tool reports whether the ICAP server is ICAP specification compliant, verifies its features and/or measures its performance.