Forum Discussion

MartinVa_245222's avatar
MartinVa_245222
Icon for Nimbostratus rankNimbostratus
Aug 28, 2017

ASM doesnt send file uploads to ICAP server

Hello, I need my ASM to work with ICAP server and check all files used for WebDAV uploads. I have configured ASM policy, assigned to VS and all I think was needed to configure but when I upload a file, F5 doesnt send it to ICAP.

 

Inspection Enabled

 

Blocking settings

 

AV protection

 

All uploads I try are succesfull but I dont receive any traffic on my ICAP server and I dont even see traffic outgoing from F5 in tcpdump.

 

Any advice? Thanks

 

ASM Advanced WAF
security
  • KeesvandenBos's avatar
    KeesvandenBos
    Icon for MVP rankMVP
    Sep 22, 2017

    Hi,

     

    The ASM is looking for the multipart header in a file upload. From the KB article:

     

    HTTP file uploads: The system checks content types for multipart file uploads in which no content profile is associated (see K70941653)

     

    You could let LTM send the data via a request adapt profile to your ICAP scanner or write an irule that will rewrite the content header in the http request and writes it back to the original content header in the http release.

     

    And be aware the the file size limit in ASM in 30mb.

     

    Cheers,

     

    Kees