OPNsense Forum

Archive => 17.1 Legacy Series => Topic started by: pancunanu on February 18, 2017, 11:31:16 am

Title: Setup Anti Virus Protection with Symantect Protection Engine 7.8.1 doesn't work
Post by: pancunanu on February 18, 2017, 11:31:16 am
Hello!

I tried to integrate OPNsense with the last version of Symantec Protection Engine (7.8.1.12) but it's not working. When I try to access web pages from my browser it returns an ICAP error but without any code ("no code error").

The proxy it's working fine in Transparent Mode if I disable ICAP.

Any suggestions?

Thanks!
Title: Re: Setup Anti Virus Protection with Symantect Protection Engine 7.8.1 doesn't work
Post by: fabian on February 18, 2017, 12:36:36 pm
I tried this as well - from a packet capture it looks like the squid package is broken (squid terminates the connection to the ICAP server before sending the request). I have already talked to Franco about this issue but he does not know why it is not working as there is nothing they have changed.

Kind regards

Fabian
Title: Re: Setup Anti Virus Protection with Symantect Protection Engine 7.8.1 doesn't work
Post by: pancunanu on February 18, 2017, 01:42:46 pm
Thank you for your reply Fabian!

Please keep me updated if any news arise!

Can you recommend another AV solution (preferably for Windows) that works with OPNsense proxy?

Best regards!
Title: Re: Setup Anti Virus Protection with Symantect Protection Engine 7.8.1 doesn't work
Post by: fabian on February 18, 2017, 01:58:39 pm
The problem is that the proxy, which is used on OPNsense, does not work at the moment (unknown reason). It is not an issue with your AV solution. This means no AV engine with an ICAP interface is currently working.
Title: Re: Setup Anti Virus Protection with Symantect Protection Engine 7.8.1 doesn't work
Post by: pancunanu on February 18, 2017, 02:05:33 pm
Good to know, thanks!
Title: Re: Setup Anti Virus Protection with Symantect Protection Engine 7.8.1 doesn't work
Post by: fabian on February 18, 2017, 02:32:25 pm
The ticket for squid is here now: http://bugs.squid-cache.org/show_bug.cgi?id=4672