Configuring Antivirus Scan for Inbound Files
Prerequisites:
1. JVM memory is configured appropriately in ActiveTransfer Gateway.
2. The ICAP server is accessible from ActiveTransfer Gateway.
You can configure an ActiveTransfer Gateway instance to connect to an ICAP server, which is configured for antivirus filters that suit your organization's requirements. Each ActiveTransfer Gateway instance can have only one ICAP server configured. If you have multiple ActiveTransfer Gateway instances, you must configure the antivirus scan settings on each instance.

To configure
ActiveTransfer Gateway for antivirus scanning of inbound files
1. On the navigation pane, select Gateways.
2. Select the server instance.
3. In the Settings section, specify the ICAP server details:
Field | Description |
ICAP server name | Type a suitable name for the ICAP server. |
Host | Type the hostname or IP address of the server that hosts the ICAP server. |
Port | Type the port number assigned to the ICAP server host. |
Service configuration | Specify the virus scan service name of the ICAP server and the run-time parameter values to send to the ICAP server in the format: service name?parameter 1vaule¶meter 2vaule¶meter 3vaule&... Here, ... indicates any additional parameters that you might want to include. For example, the c-icap server's virus service expects the following parameters virus_scan?allow 204=onforce=on sizelimit=off mode=simple where: allow 204=on enables 204 (no content) responses outside previews for virus scan if the icap client does not support it. If the 204 response to the virus scan request is No modification needed, it indicates that no virus was found in the file. force=on Enables scan of the file even if its file type is not included in the srv_clamav.ScanFileTypes directive in c-icap.conf file. sizelimit=off Enables the virus scan service to ignore the srv_clamav.MaxObjectSize directive in c-icap.conf file. mode=simple enables the allow204 response only when no virus is found and an error message if a virus found. For details on the parameters you can use, see your ICAP server documentation. |
Scan buffer size per upload | Type the maximum data buffer size (in MB) that ActiveTransfer Gateway must store in-memory for an individual upload before streaming the file data to the ICAP server for scanning. |
Total scan buffer size | Type the maximum data buffer size (in MB) that ActiveTransfer Gateway must store in-memory for all uploads across all user sessions. When ActiveTransfer Gateway reaches this limit, it refuses to accept any additional uploads and the file transactions fail. |
4. To check the ActiveTransfer Gateway connection to the ICAP server, click Test Connection.
5. Click Save.
ActiveTransfer Gateway immediately starts forwarding all inbound files to the ICAP server for virus scanning.
Note:
You can deactivate virus scanning at any time by clearing the Activate Antivirus Scan selection.