Skip to main content
Version: 8.2405.x.x RR

Installation of nevisDetect Feature Correlator

You install the component nevisDetect Feature Correlator by means of the software package nevisdetect-entrypoint-<version>.noarch.rpm, according to the description in General installation.

Together with the installation and configuration of the nevisDetect Feature Correlator, a sample configuration of nevisProxy is created in the folder /var/opt/nevisdetect/entrypoint/nevisproxy-example. The building blocks of this nevisProxy configuration are the Lua filter and the ICAP filter.

The Lua filter has the following responsibilities:

  • Collecting all required data that is not part of the HTTP request, like the login ID and the authentication realm of the user, or the session ID of the HTTP session.
  • Terminating the HTTP session in nevisProxy if requested by nevisDetect.
  • Notifying nevisDetect that a HTTP session has been terminated, due to a time-out or a user logout.

The role of the ICAP filter is to forward the data to the nevisDetect Feature Correlator.