diff --git a/www/c-icap/src/opnsense/mvc/app/controllers/OPNsense/CICAP/forms/general.xml b/www/c-icap/src/opnsense/mvc/app/controllers/OPNsense/CICAP/forms/general.xml
index a2f96e5a3..1959d7e8c 100644
--- a/www/c-icap/src/opnsense/mvc/app/controllers/OPNsense/CICAP/forms/general.xml
+++ b/www/c-icap/src/opnsense/mvc/app/controllers/OPNsense/CICAP/forms/general.xml
@@ -83,4 +83,10 @@
checkbox
This will enable logging of access log.
+
+ general.localSquid
+
+ checkbox
+ This will allow to take settings user name from local squid
+
diff --git a/www/c-icap/src/opnsense/mvc/app/models/OPNsense/CICAP/General.xml b/www/c-icap/src/opnsense/mvc/app/models/OPNsense/CICAP/General.xml
index d54cfa413..7060936c0 100644
--- a/www/c-icap/src/opnsense/mvc/app/models/OPNsense/CICAP/General.xml
+++ b/www/c-icap/src/opnsense/mvc/app/models/OPNsense/CICAP/General.xml
@@ -1,7 +1,7 @@
//OPNsense/cicap/general
c-icap configuration
- 1.0.0
+ 1.0.1
0
@@ -62,5 +62,9 @@
1
Y
+
+ 1
+ Y
+
diff --git a/www/c-icap/src/opnsense/service/templates/OPNsense/CICAP/c-icap.conf b/www/c-icap/src/opnsense/service/templates/OPNsense/CICAP/c-icap.conf
index 25398ac6c..38fcaf01d 100644
--- a/www/c-icap/src/opnsense/service/templates/OPNsense/CICAP/c-icap.conf
+++ b/www/c-icap/src/opnsense/service/templates/OPNsense/CICAP/c-icap.conf
@@ -41,6 +41,29 @@ ServerName {{ OPNsense.cicap.general.servername }}
{% else %}
ServerName {{ system.hostname }}
{% endif %}
+{% if helpers.exists('OPNsense.cicap.general.localSquid') and OPNsense.cicap.general.localSquid == '1' %}
+{% if helpers.exists('OPNsense.proxy.forward.icap.SendUsername') and OPNsense.proxy.forward.icap.SendUsername == '1' %}
+RemoteProxyUsers on
+acl AUTH auth *
+icap_access allow AUTH 127.0.0.1
+{% else %}
+RemoteProxyUsers off
+{% endif %}
+{% if helpers.exists('OPNsense.proxy.forward.icap.EncodeUsername') and OPNsense.proxy.forward.icap.EncodeUsername == '1' %}
+RemoteProxyUserHeaderEncoded on
+{% else %}
+RemoteProxyUserHeaderEncoded off
+{% endif %}
+{% if helpers.exists('OPNsense.proxy.forward.icap.UsernameHeader') and OPNsense.proxy.forward.icap.UsernameHeader != '' %}
+RemoteProxyUserHeader {{OPNsense.proxy.forward.icap.UsernameHeader}}
+{% endif %}
+{% else %}
+RemoteProxyUsers on
+acl AUTH auth *
+icap_access allow AUTH 127.0.0.1
+RemoteProxyUserHeaderEncoded on
+RemoteProxyUserHeader X-Authenticated-User
+{% endif %}
TmpDir /var/tmp
MaxMemObject 131072
DebugLevel 1
@@ -51,9 +74,6 @@ ServicesDir /usr/local/lib/c_icap
TemplateDir /usr/local/share/c_icap/templates/
TemplateDefaultLanguage en
LoadMagicFile /usr/local/etc/c-icap/c-icap.magic
-RemoteProxyUsers off
-RemoteProxyUserHeader X-Authenticated-User
-RemoteProxyUserHeaderEncoded on
ServerLog /var/log/c-icap/server.log
{% if helpers.exists('OPNsense.cicap.general.enable_accesslog') and OPNsense.cicap.general.enable_accesslog == '1' %}
AccessLog /var/log/c-icap/access.log