2.4.3 Maximum number of clients

MetaDefender ICAP Server is licensed based on the maximum number of end-user clients.

End-user clients are counted by MetaDefender ICAP Server using the X-Client-IP header received from the ICAP client. As a consequence the X-Client-IP header must be set.

If the X-Client-IP header is not set by the ICAP client then the request is blocked by MetaDefender ICAP Server.

An end-user client is enrolled for one client license once its IP address is received by MetaDefender ICAP Server in an X-Client-IP header.

The end-user client holds its share of the client licenses for 24 hours after its last activity noticed by MetaDefender ICAP Server (the last occurence of the end-user client's IP in the X-Client-IP header).

Once the 24 hours reservation time elapses after the last activity, the client license is released and can be reused for any (other) IP.

View nodes that are counted for license

Under the License menu on the bottom of the page the actual nodes –that are counted for license– can be viewed.

images/download/attachments/17863618/image2018-1-8_17-13-56.png

If there is no limit on the number of end-user clients, then this list is not present.

Symptoms

License limit reached

When maximum number of licensed clients is reached the symptoms below can be observed.

End-user client browser

Maximum number of licensed end-user clients is reached

images/download/attachments/17863618/icap_blocked_max.png

ICAP history and logs

The Web Management Console page Dashboard > ICAP history prints License limit reached as the RESULT for entries blocked by exceeding maximum client number limit.

The MetaDefender ICAP Server logs print License limit reached as the RESULT for entries blocked by exceeding maximum client number limit.

Missing client IP

When the X-Client-IP header is missing or has an empty value the symptoms below can be observed.

End-user client browser

End-user client's license identifier is missing

images/download/attachments/17863618/icap_blocked_ip.png

ICAP history and logs

The Web Management Console page Dashboard > ICAP history prints Missing client IP as the RESULT for entries blocked due to missing or empty X-Client-IP header.

The MetaDefender ICAP Server logs print Missing client IP as the log entry for requests blocked due to missing or empty X-Client-IP header.

Unlimited number of clients

OPSWAT provides special licensing of ICAP Server for cases when

  • Number of end-user-clients can not be foreseen,

  • The X-Client-IP header can not be provided.

In case of this special licensing even the presence of the X-Client-IP header is not a requirement and unlimited number of end-user-clients' traffic may be scanned.

For further details about the special licensing get in contact with your reseller or OPSWAT sales via the OPSWAT Portal.