config system icapserver

Use this command to configure an external Internet Content Adaptation Protocol (ICAP) server connector. This connector allows FortiADC to acting as an ICAP client to offload file scanning to external third-party security servers. This integration provides a multi-layered defense-in-depth strategy, allowing you to complement the local AntiVirus engine with specialized remote inspection services.

FortiADC supports only one global ICAP server configuration. To activate ICAP scanning, you must also enable the icap-server-check option within an AntiVirus profile (config security antivirus profile) and associate that profile with a Virtual Server.

Syntax

config system icapserver

set status {enable|disable}

set server <ip or domain>

set port <integer>

set cache-timeout <integer>

set service-name <string>

set ssl {enable|disable}

next

end

Setting	Description
status	Toggle to enable or disable the connector. Enabling this setting is required to establish a connection with the external ICAP server.
server	Enter the IPv4 address or the Fully Qualified Domain Name (FQDN) of the third-party ICAP server.
port	Specify the destination port used by the ICAP server. The default port is 1344. The valid range is 1-65535.
cache-timeout	Set the duration in hours that the system caches scan results from the ICAP server to improve performance for identical files. During this time, FortiADC does not re-submit the file to ICAP server. The default value is 72 hours, and the valid range is 1-168 hours.
service-name	Enter the specific service path or resource name required by the ICAP server, which appears in the URL configured in the ICAP client. For example, icap://<ip_address>/<name>.
ssl	Enable this option to secure the communication between FortiADC and the ICAP server using TLS/SSL.