ASM ICAP and Route Domains

Hi Jason,

 

 

I don't think there is full support for route domains for ICAP servers. You could confirm this and/or open a request for enhancement with F5 Support.

 

 

In the meantime, are you able to put the ICAP server(s) in the default partition and route domain?

 

 

Aaron

Hi Aaron,

 

 

I finally got a lab environment running with an ICAP server in common and route domain 0, with my virtual, HTTP Class and Policy in a second partition and route domain with strict isolation turned on in both. It works well.

 

 

Hopefully today I will have a new VLAN at my disposal to attempt this in my test environment (identical to the target environment) which I will configure in the common partition. I'll configure a virtual in common to load balance the two ICAP servers in this new VLAN and expect to see a much better result.

 

 

I have also opened a case but no response yet.

 

 

I'll let the community know the result of both the case and my configuration.

 

 

Thanks

 

J

 

 

Hmm, double post, apologies.

 

 

Thanks

 

J

 

 

OK, so using the common partition and default route domain for the ICAP server worked a treat, HTTP classes and the relative Web Apps/Policies in other partitions/route domains with Virus Detection configured in the policy use the ICAP servers as promised.

 

 

I've created a VIP in common for redundant ICAP's also, so it does the job.

 

 

Cheers

Hi Jason,

 

 

Thanks for confirming this worked.

 

 

Aaron