Product guide

ICAP plugin

You can use the ICAP plugin to integrate your Microsoft ISA Server with a McAfee Web Gateway or

McAfee Data Loss Prevention appliance. This section contains instructions specific for each McAfee

product. Be sure to follow the instructions appropriate for your environment.

Contents

About the ICAP plugin

Configure the ICAP plugin for McAfee Web Gateway 6.x appliance

Configure the ICAP plugin for a McAfee Web Gateway 7.x appliance

Configure the ICAP plugin for McAfee DLP

Statistics for the ICAP plugin

About the ICAP plugin

Use the ICAP plugin to redirect unencrypted (HTTP) web traffic from the Microsoft ISA Server to the

McAfee Web Gateway appliance or McAfee DLP for content filtering.

• McAfee Web Gateway — Use the ICAP plugin to redirect either or both inbound (RESPMOD) and

outbound (REQMOD) unencrypted (HTTP) web traffic from the Microsoft ISA Server to the ICAP

server on the McAfee Web Gateway appliance. When traffic reaches the ICAP server on the McAfee

Web Gateway appliance, it takes action on the traffic (by modifying the request) according to

policies and rules set up on the appliance. The McAfee Web Gateway appliance then sends a

response back to the Microsoft ISA Server, which delivers the response to the user. If the response

is to block the web traffic, the user is blocked from access to that particular website or webpage. If

the response is to allow the web traffic, the user is allowed to access that particular website or

webpage.

• McAfee DLP — Use the ICAP plugin to redirect outbound (REQMOD) unencrypted (HTTP) web

traffic from the Microsoft ISA Server to the ICAP server on the McAfee DLP appliance. When traffic

reaches the ICAP server on the McAfee DLP appliance, it is analyzed according to policies and rules

set up in the McAfee DLP applaince. The McAfee DLP appliance then sends a response back to the

Microsoft ISA Server, which delivers the response to the user. If the response is to block the web

traffic, the user is blocked from access to that particular website or webpage. If the response is to

allow the web traffic, the user is allowed to access that particular website or webpage. For more

information about McAfee DLP, see the product documentation.

The ICAP plugin has been successfully tested on standalone and array-configured Microsoft ISA Servers.