antivirus protection using ASM

if you mean the icap connection, yes it allways slow down the application (a part of it). There are severall stations, which create a delay.

1. ASM collect the complete file
2. ASM send to AV
3. AV scan the file - bigger files need more time to scan (4.) AV send the file back, although it should send only a response code

But every AV method creates a delay, depending on the file size. Because of this, you only scan a request with file upload and not every request. So, not the application has a slow down issue, only the file upload process (which isn't an issue).

anything wrong? I don't think so.