Error while connection to ICAP AV server

  • 1
  • Problem
  • Updated 2 months ago
  • (Edited)
Hi,
integrating our StorageZone Controller 5.3 with ICAP RFC-conform Sophos SAVDI does not work. Each time a file has to be scanned there are a plenty of errors in avscan-yyyy-mm-dd.log stating. Do you have any ideas, as documentation is very lack of details....?

Thanks, Christoph

avscan-yyyy-mm-dd.log
[    3] ERROR ShareFile.Libraries.ScanService.QueueProcessor <Process>b__7_0 - fi96ba16-2e7a-5621-9ac8-e9a1b938a531 System.IO.IOException: Unable to write data to the transport connection: An established connection was aborted by the software in your host machine. ---> System.Net.Sockets.SocketException: An established connection was aborted by the software in your host machine   at System.Net.Sockets.Socket.Send(Byte[] buffer, Int32 offset, Int32 size, SocketFlags socketFlags)
   at System.Net.Sockets.NetworkStream.Write(Byte[] buffer, Int32 offset, Int32 size)
   --- End of inner exception stack trace ---
   at System.Net.Sockets.NetworkStream.Write(Byte[] buffer, Int32 offset, Int32 size)
   at ShareFile.Libraries.ScanService.ICAP.IcapClient.Send(Byte[] bytes, Int32 size)
   at ShareFile.Libraries.ScanService.ICAP.IcapClient.ScanStream(Stream fileStream, Uri uploadUri, String fileMimeType, String userEmail, String userIpAddress)
   at AVScanService.AVProviders.ICAP.IcapAVProvider.GetClassification(FileClassificationRequest request)
   at ShareFile.Libraries.ScanService.QueueProcessor.ProcessItem(QueueItem queueItem, FileClassificationProviderBase scanProvider)
   at ShareFile.Libraries.ScanService.QueueProcessor.<Process>b__7_0(QueueItem queueItem)
  • Sophos SAVDI 2.6 (Windows) has been installed in according to documentation https://www.sophos.com/support/documentation/sav-dynamic-interface.aspx
  • ICAP connection test from StorageZone Controller to ICAP Service was successfull with response Valid. ICAP Version: "1-01-3-72-1-5-51-199-D59AA26E"
  • There is NO Firewall between StorageZoneController and Sophos SAVDI and the relevant ports are open.
  • Wireshark Trace will give the following output on StorageZone Controller:
======
RESPMOD icap://172.27.107.55/avscan ICAP/1.0 ->> This is the ICAP capable AV Server
Host: 172.27.107.55
User-Agent: Citrix ShareFile ICAP Client/1.0
Allow: 204
Encapsulated: req-hdr=0, res-hdr=106, res-body=241
GET https://xxx.sf-api.com/Folders/Test/Citrix.pptx HTTP/1.1
Host: xxx.sf-api.com
HTTP/1.1 200 OK
Content-Type: application/vnd.openxmlformats-officedocument.presentationml.presentation
Content-Length: 9230555
ICAP/1.0 500 Server Error 8cd8db
ICAP/1.0 505 Unsupported protocol or version
Photo of Christoph Link

Christoph Link

  • 3 Posts
  • 1 Reply Like
  • sad, Citrix Support says, it is a Sophos issue, Sophos says it is a Citrix issue....

Posted 2 months ago

  • 1

Be the first to post a reply!