Trading Networks 10.3 | Administering and Monitoring B2B Transactions | Managing File Transfers with ActiveTransfer Gateway | Configuring ActiveTransfer Gateway | Supporting Virus Scanning with Internet Content Adaptation Protocol | Configuring Antivirus Scan for Inbound Files
 
Configuring Antivirus Scan for Inbound Files
Prerequisites:
1. JVM memory is configured appropriately in ActiveTransfer Gateway.
2. The ICAP server is accessible from ActiveTransfer Gateway.
You can configure an ActiveTransfer Gateway instance to connect to an ICAP server, which is configured for antivirus filters that suit your organization's requirements. Each ActiveTransfer Gateway instance can have only one ICAP server configured. If you have multiple ActiveTransfer Gateway instances, you must configure the antivirus scan settings on each instance.
*To configure ActiveTransfer Gateway for antivirus scanning of inbound files
1. In My webMethods: Administration > Integration > Managed File Transfer > Server Management.
2. Select the ActiveTransfer Gateway instance. For details, see Managing File Transfers with webMethods ActiveTransfer.
3. Click the Antivirus Scan tab.
4. In the Status section, select Activate Antivirus Scan.
You can deactivate virus scanning at any time by clearing the Activate Antivirus Scan check box.
5. In the Settings section, specify the ICAP server details:
Field
Description
ICAP Server Name
Type a suitable name for the ICAP server.
Host
Type the hostname or IP address of the server that hosts the ICAP server.
Port
Type the port number assigned to the ICAP server host.
Service Configuration
Specify the virus scan service name of the ICAP server and the run-time parameter values to send to the ICAP server in the format:
service name?parameter 1vaule&parameter 2vaule&parameter 3vaule&...
Here, ... indicates any additional parameters that you might want to include.
For example, the c-icap server's virus service expects the following parameters virus_scan?allow 204=onforce=on sizelimit=off mode=simple
where:
*allow 204=on enables 204 (no content) responses outside previews for virus scan if the icap client does not support it. If the 204 response to the virus scan request is No modification needed, it indicates that no virus was found in the file.
*force=on Enables scan of the file even if its file type is not included in the srv_clamav.ScanFileTypes directive in c-icap.conf file.
*sizelimit=off Enables the virus scan service to ignore the srv_clamav.MaxObjectSize directive in c-icap.conf file.
*mode=simple enables the allow204 response only when no virus is found and an error message if a virus found.
For details on the parameters you can use, see your ICAP server documentation.
Scan Buffer Size Per Upload
Type the maximum data buffer size (in MB) that ActiveTransfer Gateway must store in-memory for an individual upload before streaming the file data to the ICAP server for scanning.
For more details on how you can determine the scan buffer size, see Memory Configuration for Virus Scanning of Files Exceeding Scan Buffer Size.
Total Scan Buffer Size
Type the maximum data buffer size (in MB) that ActiveTransfer Gateway must store in-memory for all uploads across all user sessions. When ActiveTransfer Gateway reaches this limit, it refuses to accept any additional uploads and the file transactions fail.
6. To check the ActiveTransfer Gateway connection to the ICAP server, click Test Connection.
7. Click Save.
ActiveTransfer Gateway immediately starts forwarding all inbound files to the ICAP server for virus scanning.
Note:
You can deactivate virus scanning at any time by clearing the Activate Antivirus Scan selection.