I like the simplicity, the way it works out of the box. It's pretty easy to run and configure. The integration of the network devices with the ICAP server was easily done. Also, we don't have many false positives. When a file really is malicious, it is blocked. There is a really low false-positive ratio. It just works. We don't use it for extreme use cases, and we didn't want to make extreme modifications because it works. We like that we don't need to put too much effort into operating the server. We just installed it, did a little bit of configuration and customization, and it just works.
