Unable to download large files over native FTP when ICAP is enabled


<< Back to Knowledge Search

Solution

Overview

Download of large files over native FTP may fail when ICAP Response Modification is enabled on the ProxySG.
ProxySG will need to download the whole file before sending it to the ICAP server for scanning. If the file is large, it will take a while before the download completes and the client may time out unless the proxy sends some keep-alive traffic.
When there is no ICAP configured, the ProxySG will serve the file to the FTP client instantly.

Cause
Resolution

The following policy will enable the ProxySG to send an FTP Patience Page to the FTP client and prevent it from timing out.  For information on how to install CPL into the local policy file, please see 000010101.

<Proxy>
;  CPL used to send patience page to FTP client when using ICAP
condition=ftp_sites response.icap_feedback(patience_page, 5)

define condition ftp_sites
   url.host=ftp.myserver.local
   url.address=169.254.1.1
; enter your list of FTP servers here
end
 

Workaround
Additional Information
Bug Number
InQuira Doc IdKB4004
Attachment

Article Feedback

Hide Properties
First Published      10/01/2014
Last Modified      10/01/2014
Last Published      10/01/2014
Article Audience
Product      ProxySG
Software      ProxyAV 3, SGOS 4, SGOS 5, SGOS 6
Topic      Installation / Configuration, Policy Management, Usability
Article Number      000014166
Summary     
Was this helpful?
Comments:
 
Previous MonthNext Month
SunMonTueWedThuFriSat