Solutions

Unable to download large files over native FTP when ICAP is enabled

Solutions ID:    KB4004
Version:    2.0
Status:    Published
Published date:    09/09/2010
Updated:    10/16/2013
 

Problem Description

Download of large files over native FTP may fail when ICAP Response Modification is enabled on the ProxySG.
ProxySG will need to download the whole file before sending it to the ICAP server for scanning. If the file is large, it will take a while before the download completes and the client may time out unless the proxy sends some keep-alive traffic.
When there is no ICAP configured, the ProxySG will serve the file to the FTP client instantly.

Resolution

The following policy will enable the ProxySG to send an FTP Patience Page to the FTP client and prevent it from timing out.  For information on how to install CPL into the local policy file, please see KB3495.

<Proxy>
;  CPL used to send patience page to FTP client when using ICAP
condition=ftp_sites response.icap_feedback(patience_page, 5)

define condition ftp_sites
   url.host=ftp.myserver.local
   url.address=169.254.1.1
; enter your list of FTP servers here
end
 


Rate this Page

Please take a moment to complete this form to help us better serve you.

Did this document help answer your question?
 
 
If you are finished providing feedback, please click the RATE CONTENT button. Otherwise, please add more detail in the following text box and then click RATE CONTENT.
 
 

Your response will be used to improve our document content.

Ask a Question