GlobalScape

Requirement

MD ICAP Server v5.7.0 and newer

2 new service paths were created to support integration with GLobalScape (avoid setting the flag unique_uri_per_service)

• REQMOD: OMSScanReq-AV-GLBEFT
• RESPMOD: OMSScanResp-AV-GLBEFT

MD ICAP Server v4.11.0 and newer

• with traditional service path (OMScanReq-AV and OMScanResp-AV) set true for unique_uri_per_service on the MD ICAP Server and then restart the MD ICAP Server (supported since MD ICAP Server v4.11.0) Refer to: https://docs.opswat.com/mdicap/configuration/configuration-file

Sample Configuration

below is the guideline to configure the upload server with GlobalScape and also integrate with MD ICAP Server (as a example)

Use-case

Configuration

1. Navigate to the tab Server → Default Server Group → LocalHost → Right-click to create the new Site

2. Choose the Next button

3. Input the Site label → Click on the next button

4. Choose the next button

5. Choose the next button

6. Choose the next button

7. Generate certificates for the server and add them to your site

8. Create a new user for your site

9. Fill your username and password to the input box

10. Choose the next button

11. Choose the next button to complete create user

12. After creating the user we will enable the WEB Admin to upload files to the server

13. Create a new profile

14. Configure Content Integrity Control profile: https://www.globalscape.com/services-support/eft-best-practices/use-efts-content-integrity-control-feature-add-extra-layer-data

15. Hit the button Test Connection to verify connection to the MD ICAP Server

16. Create a new Event Rule for the Site

17. Add the condition If Transfer Bytes below the event File Uploaded

18. Add the action File: Scan and select the MD ICAP Server profile created above

19. Select the profile MD ICAP Server created above

20. Add an action File: * Operation to delete the file if the result is failed

21. Config File Operation

Receive GlobalScape custom header

GlobalScape can custom the value of below header: X-Server-IP, X-Authenticated-User, X-Authenticated-Groups

to allow GlobalScape send these headers to MD ICAP Server, the X-Include header of OPTIONS's response must contain those values

X-Include header on OPTIONS responses X-Client-IP by default, to override this value the MD ICAP Server since v5.10.0 has supported by flag global/set_options_x_include_value (refer to Configuration file)

e.g for configuration on Windows: