Data Loss Prevention

 View Only
  • 1.  ICAP protocol data chunking with Vontu

    Posted May 21, 2014 06:24 AM

    I am using ICAP protocol for dlp detection. I am able to connect to DLP engine using the icap protocol. When I send the file with out chunking it works fine. But when I try to do chunking I am facing problem. Theese are the steps followed.

     

    1. Creating chunk of 10240 bytes with preview=true & earlyterminted=false and sent it to DLP engine.
    2. It got 200 (continue) response from the icap server.
    3. Now again, I am sending another chunk of data with preview=false and earlyterminted=false.
    4. Now I got ICAPResponse OK response from the icap server.
    5. But I have still some more data to send..

     

      My Question is whether Vontu supports chunking or not. If yes can you help me out with any references/documents.

     

    Thanks in Advance.



  • 2.  RE: ICAP protocol data chunking with Vontu

    Broadcom Employee
    Posted May 21, 2014 01:19 PM

    What kind of Proxy are you using? We only fully support working with a few vendors. We do support ICAP, but I am not sure about the chunking question. I will need to research. You might be better served by opening up a Support Case.



  • 3.  RE: ICAP protocol data chunking with Vontu

    Posted May 25, 2014 12:01 AM

    I am not using any proxy. We have a folder where we keep files. We have to send these files to Vontu for scanning. I am able to send the files using MIMO Icap client using Java. But I am having issues with large size files. When the file size is greater than 1GB. In this case I am trying to use chunking. 



  • 4.  RE: ICAP protocol data chunking with Vontu

    Broadcom Employee
    Posted Jun 02, 2014 07:09 PM

    Hi,

    We expect to talk to a proxy, one that does not do chunking. If you can make your software work more like a proxy without chunking, then we will probably work better with your program. Chunking causes us problems, we need to look at the stream for PacketCapture and then content extraction.

    What you are trying to do is not supported and as such I would expect your process to run into some trouble.

    Best,

    Ryan