Forum Discussion

Mike_Maher's avatar
Mike_Maher
Icon for Nimbostratus rankNimbostratus
Jan 23, 2013

ASM and ICAP File Scanning

I am looking to implement ICAP file scanning for one of my applications that run through ASM. I am curious if anyone has any experience with this, and if you could tell me if there are any performanc...
app sec
BIG-IP Access Policy Manager (APM)
security
Torti's avatar
Torti
Icon for Cirrus rankCirrus
Jan 24, 2013
If you disable the Blocking Setting 'Request length exceeds defined buffer size', it is possible to bypass the virus scanning functionality (ICAP). If you don't disable it, 20mb is the maximum request size and bigger requests will be blocked. If you need to allow files bigger than 20mb, you have to do virus scanning by another way and not with the ASM.

 

I.e. you could do it on the backend system.

 

regards