You are configuring ICAP with DLP Web Prevent, and you are receiving an error (for example, "Incorrect ICAP response"). You need a method of checking the functionality of Web Prevent without requiring a proxy server for verification.
In order to prove that the Web Prevent server is functioning properly with regard to accepting ICAP client connections, there are several actions which should show with relative certainty that it is healthy.
Check the status of the Web Prevent server in Enforce. Ensure that there are no errors and that all the processes are running and checking in with the Vontu Manager. (While there, click the Settings button for the server, and confirm the Port setting - default is 1344.)
Open a Telnet session to the Web Prevent server, specifying the port number (default 1344):
telnet <server_name_or_IP> <port>
When the Telnet session opens, type the following and press Enter:
OPTIONS icap://127.0.0.1:1344/reqmod ICAP/1.0
Note 1: On some servers, depending on the Telnet options, the command may not echo to the screen, or you may need to press Enter twice. Note 2: If you are using RESPMOD (as opposed to REQMOD), modify the URL accordingly.
If the Web Prevent server is successfully responding to ICAP, the response should look similar to the following (DLP version 11.5 in this example):