Fortinet black logo

CLI Reference

config icap local-server

config icap local-server

Configure ICAP local server.

config icap local-server
    Description: Configure ICAP local server.
    edit <icap-server-id>
        set status [disable|enable]
        set secure-connection [disable|enable]
        set status-ipv6 [disable|enable]
        set icap-incoming-port {integer}
        set icap-incoming-ssl-port {integer}
        set interface {string}
        set incoming-ip {ipv4-address-any}
        set incoming-ipv6 {ipv6-address}
        set ssl-cert {string}
        set strict-scheme-check [disable|enable]
        set srcaddr {string}
        config icap-service
            Description: Set up services for local ICAP server.
            edit <service-id>
                set name {string}
                set dlp-sensor {string}
                set webfilter-profile {string}
                set av-profile {string}
            next
        end
    next
end

config icap local-server

Parameter

Description

Type

Size

icap-server-id

ICAP local server id.

integer

Minimum value: 0 Maximum value: 4294967295

status

Enable/disable status for icap server network profile.

option

-

Option

Description

disable

Disable the status for ipv4 in network-profile.

enable

Enable the status for ipv4 in network-profile.

secure-connection

Enable/disable status for secured icap server network profile.

option

-

Option

Description

disable

Disable the status for ipv4 ssl in network-profile.

enable

Enable the status for ipv4 ssl in network-profile.

status-ipv6

Enable/disable status for icap server service ipv6.

option

-

Option

Description

disable

Disable the status for ipv6 in network-profile.

enable

Enable the status for ipv6 in network-profile.

icap-incoming-port

Accept incoming ICAP requests on one or more ports.

integer

Minimum value: 1 Maximum value: 65535

icap-incoming-ssl-port

Accept incoming secured ICAP requests on one or more ports.

integer

Minimum value: 1 Maximum value: 65535

interface

Interface name

string

Maximum length: 15

incoming-ip

Restrict the ICAP server to only accept sessions from this IP address. An interface must have this IP address.

ipv4-address-any

Not Specified

incoming-ipv6

Restrict the ICAP server to only accept sessions from this IPv6 address. An interface must have this IPv6 address.

ipv6-address

Not Specified

ssl-cert

SSL certificate for SSL interception.

string

Maximum length: 35

strict-scheme-check

Enable/disable strict check of scheme.

option

-

Option

Description

disable

Disable strict check of scheme.

enable

Enable strict check of scheme.

srcaddr

Source address name.

string

Maximum length: 79

config icap-service

Parameter

Description

Type

Size

service-id

ID of the ICAP server service.

integer

Minimum value: 0 Maximum value: 4294967295

name

Name of ICAP service profile.

string

Maximum length: 35

dlp-sensor

Name of an existing DLP sensor.

string

Maximum length: 35

webfilter-profile

Name of an existing Web filter profile.

string

Maximum length: 35

av-profile

Name of an existing Antivirus profile.

string

Maximum length: 35

config icap local-server

Configure ICAP local server.

config icap local-server
    Description: Configure ICAP local server.
    edit <icap-server-id>
        set status [disable|enable]
        set secure-connection [disable|enable]
        set status-ipv6 [disable|enable]
        set icap-incoming-port {integer}
        set icap-incoming-ssl-port {integer}
        set interface {string}
        set incoming-ip {ipv4-address-any}
        set incoming-ipv6 {ipv6-address}
        set ssl-cert {string}
        set strict-scheme-check [disable|enable]
        set srcaddr {string}
        config icap-service
            Description: Set up services for local ICAP server.
            edit <service-id>
                set name {string}
                set dlp-sensor {string}
                set webfilter-profile {string}
                set av-profile {string}
            next
        end
    next
end

config icap local-server

Parameter

Description

Type

Size

icap-server-id

ICAP local server id.

integer

Minimum value: 0 Maximum value: 4294967295

status

Enable/disable status for icap server network profile.

option

-

Option

Description

disable

Disable the status for ipv4 in network-profile.

enable

Enable the status for ipv4 in network-profile.

secure-connection

Enable/disable status for secured icap server network profile.

option

-

Option

Description

disable

Disable the status for ipv4 ssl in network-profile.

enable

Enable the status for ipv4 ssl in network-profile.

status-ipv6

Enable/disable status for icap server service ipv6.

option

-

Option

Description

disable

Disable the status for ipv6 in network-profile.

enable

Enable the status for ipv6 in network-profile.

icap-incoming-port

Accept incoming ICAP requests on one or more ports.

integer

Minimum value: 1 Maximum value: 65535

icap-incoming-ssl-port

Accept incoming secured ICAP requests on one or more ports.

integer

Minimum value: 1 Maximum value: 65535

interface

Interface name

string

Maximum length: 15

incoming-ip

Restrict the ICAP server to only accept sessions from this IP address. An interface must have this IP address.

ipv4-address-any

Not Specified

incoming-ipv6

Restrict the ICAP server to only accept sessions from this IPv6 address. An interface must have this IPv6 address.

ipv6-address

Not Specified

ssl-cert

SSL certificate for SSL interception.

string

Maximum length: 35

strict-scheme-check

Enable/disable strict check of scheme.

option

-

Option

Description

disable

Disable strict check of scheme.

enable

Enable strict check of scheme.

srcaddr

Source address name.

string

Maximum length: 79

config icap-service

Parameter

Description

Type

Size

service-id

ID of the ICAP server service.

integer

Minimum value: 0 Maximum value: 4294967295

name

Name of ICAP service profile.

string

Maximum length: 35

dlp-sensor

Name of an existing DLP sensor.

string

Maximum length: 35

webfilter-profile

Name of an existing Web filter profile.

string

Maximum length: 35

av-profile

Name of an existing Antivirus profile.

string

Maximum length: 35