DLP - Poor ICAP Agent performance

Document ID : KB000050553
Last Modified Date : 14/02/2018
Show Technical Document Details

Description:

To maximize performance for integration of CA DLP with ICAP (Internet Content Adaptation Protocol) clients on proxy servers such as Blue Coat ProxySG and Squid, the system should be suitably configured.

Solution:

Some areas of consideration when improving performance on BlueCoat are Monitoring and Routing:

Monitoring

The ICAP Response Service (respmod) monitors all incoming traffic, i.e. responses from the web server, and this can degrade performance. If monitoring of incoming traffic is not required, it is advised that the ICAP Response Service (respmod) is disabled.

Routing

Performance can be improved by ensuring that only data that needs policy applied is passed to the CA DLP ICAP Agent. For example, the BlueCoat policy can be modified to filter out image or javascript files, which DLP cannot interact with.

For other considerations please reference the relevant ICAP (Internet Content Adaptation Protocol) client documentation.