Endpoint Protection

 View Only

  • 1.  Symantec Scan Engine User-Agent ICAP header

    Posted Aug 19, 2009 06:25 AM
    Hello,
    I am evaluating Symantec Scan Engine 5.2 and plan to purchase it very soon.
    I have just one question and don't know where to submit it.
    When a client connects to Symantec Scan Engine with ICAP, it can specify the header "User-Agent" as specified in the software developpers guide. Can I retreive this information in the reports generated by the server when a virus was detected ?
    Thanks in advance,
    Michel


  • 2.  RE: Symantec Scan Engine User-Agent ICAP header

    Posted Aug 19, 2009 10:40 AM
    Hello mterrisse
    Which information you want to retreive from server when virus infected?
    Thank you.


  • 3.  RE: Symantec Scan Engine User-Agent ICAP header

    Posted Aug 24, 2009 05:19 AM
    Hello,

    The ICAP clients are located on hundreds of virtual machines. Currently the reports mention the ip addresses of the client machines, but it is difficult to use them because the ip addresses are dynamic and can change at any time. We 'd like to send in "User-Agent" (or any other header) strong identifiers for the virtual machines, and see this information in the reports. Do you think there is a way to do this ?

    Best regards,

    Michel