IWSVA processes and threads

IWSVA processes

• InterScan Web Security Virtual Appliance Daemon process*—Internet threat scanning and content filtering for HTTP and/or ICAP modes; file name is "iwssd".

• InterScan FTP Daemon process—Internet threat scanning for FTP; file name is "isftpd" (same as above)

• IWSVA Javascan daemon—This is a JVM that runs the IWSVA Javascan code that handles applet analysis and instrumentation, and applet, cab file, and PE file signature checking and policy enforcement. The currently executing iwssd communicates with the Javascan daemon via a socket connection.

• java—Tomcat Application Server; used by Web console

• logtodbd—Importing log entries from the hard drive to database

• En_Main—The Control Manager agent

• Squid (squid)—when enabled performs caching of the retrieved content in forward Proxy mode

• WCCP Server Daemon (wccpd)—communicates with the router in WCCP mode

* In addition to the request processing threads, iwssd may spawn these additional threads:

• Deferred scan thread—does the deferred scanning, if enabled

• Socket reaper thread—manages the connection time-out issues

• Configuration update thread—reloads the daemon’s configuration and keeps access log

• isdelvd daemon—delivers email notifications

• CPU utilization counter threads—collects the information about performance usage