Data Loss Prevention

 View Only
  • 1.  ICAP protocol: Saving name of the attachment in incident.

    Posted Mar 25, 2016 05:19 PM

    Hi,

    We are using the ICAP protocol to send the file scanning request to DLP servers. Whenever the file contains sensitive info, an incident gets recorded and we can get the details from enforce server GUI/admin console.

     

    Name of the attachement that gets saved depends on the path present in the HTTP header which is part of the ICAP request.

    For example if HTTP header has the path like "http://test.com/service/document/test_file", then the name of the attachment in the incident appears as "test_file".

    All is well in this world till we send the document which has a name with international chanracter.

    For example, if we send the ICAP request with HTTP header path like

    "http://test.com/service/document/姌 ギョ難㧦を諧 裌し 滯捨きゃ.docx",

    DLP server starts behaving erratically. ICAP socket connections gets reset/closed. For some other international char file names we get "BAD Request" in the response.

     

    So we want to know,

    - if there is another way to store the name of the file/attachment in the incident.

    - How can we make it work if the file name has international characters.

     

    Help is much appreciated.

     



  • 2.  RE: ICAP protocol: Saving name of the attachment in incident.
    Best Answer

    Posted Apr 01, 2016 10:37 AM

    Hi, this got resolved. before adding the filename to URL in the header we encoded it using URLEncoder with "UTF-8".