For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

MartinVa_245222's avatar
MartinVa_245222
Icon for Nimbostratus rankNimbostratus
Aug 28, 2017

ASM doesnt send file uploads to ICAP server

Hello, I need my ASM to work with ICAP server and check all files used for WebDAV uploads. I have configured ASM policy, assigned to VS and all I think was needed to configure but when I upload a fil...
ASM Advanced WAF
security
KeesvandenBos's avatar
KeesvandenBos
Icon for MVP rankMVP
Sep 22, 2017

Hi,

 

The ASM is looking for the multipart header in a file upload. From the KB article:

 

HTTP file uploads: The system checks content types for multipart file uploads in which no content profile is associated (see K70941653)

 

You could let LTM send the data via a request adapt profile to your ICAP scanner or write an irule that will rewrite the content header in the http request and writes it back to the original content header in the http release.

 

And be aware the the file size limit in ASM in 30mb.

 

Cheers,

 

Kees