...
Step 1 | From the UDMG navigation pane, select Management > Rules. The Rule list displays. | ||
---|---|---|---|
Step 2 | select a rule or create a new one. The Rule Details displays. | ||
Step 3 | Click the Post-tasks tab on the Rule detail panel
| ||
Step 4 | Click Save and Confirm. | ||
Step 5 | The rule is updated to include the ICAP taks as part of the UDMG file transfer workflow. The task tab shows a green dot to indicate that a task is configured. | ||
Step 6 | Proceed with attempting to transfer a test file from EICAR | ||
Step 7 | After the file upload, it it transferred to the ICAP antivirus server during the post-task processing and stops in ERROR status. The Error Message indicates that an infection is found. If not infection was found by the ICAP antivirus server, then the transfer would complete with a successful status | ||
Step 8 | The infection error details can be forwarded to UAC as a universal event, see https://docs.stonebranch.com/confluence/display/UDMG12/Universal + Event + Integration, and further corrective actions can be triggered by the Controler. | ||
Step 9 | The scanning details from the interrogation to the ICAP antivirus server are kept as transfer metadata. They can be displayed, for instnace here with the command line interface using the ‘transfer get’ command. In particular the X-headers show the type of infection as reported by the server.
|
...