HTTP Trickling to Prevent Timeouts
HTTP trickling is a mechanism used to prevent the HTTP client or server from timing-out during a file transfer or during antivirus scanning. For more information, see the following topics:
Understanding HTTP Trickling
HTTP trickling is a mechanism used to prevent the HTTP client or server from timing-out during a file transfer or during antivirus scanning. On some slow link transferring, a large file could timeout if too much time is taken for the antivirus scanner to scan a complex file.
For Sophos Antivirus, the HTTP trickling is supported from Junos OS Release 10.1R1. Starting from Junos OS Release 15.1X49-D10 and Junos OS Release 17.3R1, Kaspersky Anitvirus support is discontinued. For Avira Antivirus, the HTTP Trickling is supported from Junos OS Release 18.4R1.
HTTP trickling is the forwarding of specified amounts of unscanned HTTP traffic to the requesting HTTP client to prevent the browser window from timing out while the scan manager examines downloaded HTTP files. (The security device forwards small amounts of data in advance of transferring an entire scanned file.)
HTTP Trickling is time-based and there is only one parameter, the time-out interval, to configure for this feature. By default, trickling is disabled.
The timeout based trickling is packet driven. This means, if no packet is received within a certain time frame, HTTP trickling is discontinued. This setting is only supported for HTTP connections.
Configuring HTTP Trickling to Prevent Timeouts During Antivirus Scanning (CLI Procedure)
To configure HTTP trickling, use the following CLI configuration statements:
security utm feature-profile anti-virus kaspersky-lab-engine {
profile name {
trickling timeout seconds;
}
}