Back to Proxy Anti Virus main section
If you want to receive in your SIEM or syslog server the detection information, use the remote syslog section to schedule your events.
This feature is available on Artica 4.30x Service Pack 970 or Artica v4.40
Note that the latest stable version of ICAP engine is v5.0.10 or above
- On the left menu, choose “
Events Center” > “Syslog” - Select the tab “
Remote logging” - Click on New rule button.
- Set the address of the remote address and port of the remote Syslog listener.
- The important parameter is to choose “ICAP HTTP Security service Detected Threats”