CyberGuard SG300 User Manual page 126

Check Enable ICAP functionality to enable the ICAP features of the CyberGuard unit's
web cache.
ICAP REQMOD server is the URL for an ICAP server's REQMOD service. This allows
an ICAP server to modify web transaction requests, i.e. to process as they are being
initially requested by the LAN PC, e.g. for URL filtering. It must begin with icap://, e.g.:
icap://192.168.0.10:1344/reqmod
ICAP RESPMOD server is the URL for an ICAP server's RESPMOD service. This
allows an ICAP server to modify web transaction responses, i.e. to process traffic that is
returned from an external web server, e.g. for virus scanning. It must begin with icap://,
e.g.: icap://192.168.0.10:1344/respmod
You may choose to Bypass ICAP server if uncontactable. If the ICAP server is not
responding to requests, web transactions are allowed as normal. If this is option
disabled, all web transactions are blocked until the ICAP server becomes contactable.
Web cache with access control
To allow the web cache to operate simultaneously with access controls, including content
filtering and anti-virus, you must make some configuration changes.
Select Advanced from the System menu, click the Configuration Files tab. Click the
Modify icon for squid.conf.
Add the following three lines anywhere in the file:
cache_peer 127.0.0.1 parent 81 0 no-query default
acl authd proto HTTP
never_direct allow authd
Click Finish.
Network Setup
122