Forward User information to DLP via ICAP
search cancel

Forward User information to DLP via ICAP

book

Article ID: 165770

calendar_today

Updated On:

Products

ProxySG Software - SGOS

Issue/Introduction

Authenticated user and group information is sent from the ProxySG to ICAP server or ProxySG forwarding to ProxySG to ICAP server.

Resolution

Forward the Domain and Username Information (WinNT://Domain\Username) from the child proxysg to upstream proxysg or single proxysg to DLP, and then pass via ICAP:-
 
Child Proxy - Local Policy Files
 
------------------------------------------
 
<Proxy>
action.ControlRequestHeader1(yes)
define action ControlRequestHeader1
set(request.x_header.username, "$(user.domain)\$(user.name)")
end action ControlRequestHeader1
 
Parent Proxy - Configuration -> Authetntication - Policy Substitution - User Information (Ignore this on Single ProxySG)
 
--------------------------------------------------------------------------------------------------------------------------------------------------------------
 
Realm name: ad
Username: $(request.x_header.username)
Full username: $(request.x_header.username)
Parent Proxy - Local Policy Files  (Ignore this on Single ProxySG)
 
------------------------------------------------------------------------------
 
<Proxy>
Authenticate(ad)
 
Please note that on ICAP configuration make sure the send autheticated-user is enable.
Powered by Wolken Software