Error while connection to ICAP AV server

  • 1
  • Problem
  • Updated 7 months ago
  • (Edited)
integrating our StorageZone Controller 5.3 with ICAP RFC-conform Sophos SAVDI does not work. Each time a file has to be scanned there are a plenty of errors in avscan-yyyy-mm-dd.log stating. Do you have any ideas, as documentation is very lack of details....?

Thanks, Christoph

[    3] ERROR ShareFile.Libraries.ScanService.QueueProcessor <Process>b__7_0 - fi96ba16-2e7a-5621-9ac8-e9a1b938a531 System.IO.IOException: Unable to write data to the transport connection: An established connection was aborted by the software in your host machine. ---> System.Net.Sockets.SocketException: An established connection was aborted by the software in your host machine   at System.Net.Sockets.Socket.Send(Byte[] buffer, Int32 offset, Int32 size, SocketFlags socketFlags)
   at System.Net.Sockets.NetworkStream.Write(Byte[] buffer, Int32 offset, Int32 size)
   --- End of inner exception stack trace ---
   at System.Net.Sockets.NetworkStream.Write(Byte[] buffer, Int32 offset, Int32 size)
   at ShareFile.Libraries.ScanService.ICAP.IcapClient.Send(Byte[] bytes, Int32 size)
   at ShareFile.Libraries.ScanService.ICAP.IcapClient.ScanStream(Stream fileStream, Uri uploadUri, String fileMimeType, String userEmail, String userIpAddress)
   at AVScanService.AVProviders.ICAP.IcapAVProvider.GetClassification(FileClassificationRequest request)
   at ShareFile.Libraries.ScanService.QueueProcessor.ProcessItem(QueueItem queueItem, FileClassificationProviderBase scanProvider)
   at ShareFile.Libraries.ScanService.QueueProcessor.<Process>b__7_0(QueueItem queueItem)
  • Sophos SAVDI 2.6 (Windows) has been installed in according to documentation
  • ICAP connection test from StorageZone Controller to ICAP Service was successfull with response Valid. ICAP Version: "1-01-3-72-1-5-51-199-D59AA26E"
  • There is NO Firewall between StorageZoneController and Sophos SAVDI and the relevant ports are open.
  • Wireshark Trace will give the following output on StorageZone Controller:
RESPMOD icap:// ICAP/1.0 ->> This is the ICAP capable AV Server
User-Agent: Citrix ShareFile ICAP Client/1.0
Allow: 204
Encapsulated: req-hdr=0, res-hdr=106, res-body=241
HTTP/1.1 200 OK
Content-Type: application/vnd.openxmlformats-officedocument.presentationml.presentation
Content-Length: 9230555
ICAP/1.0 500 Server Error 8cd8db
ICAP/1.0 505 Unsupported protocol or version
Photo of Christoph Link

Christoph Link

  • 4 Posts
  • 1 Reply Like
  • sad, Citrix Support says, it is a Sophos issue, Sophos says it is a Citrix issue....

Posted 1 year ago

  • 1
Photo of Aurelien De Canck

Aurelien De Canck

  • 11 Posts
  • 1 Reply Like
HI there,

We had an official statement from Citrix that Sophos ICAP was not supported currently with Sharefile, did you have another feedback from them ?