Forum Discussion
CirrostratusASM INtegrated services
MVPHi THE_BLUE,
it won't work out the box, you have to configure ICAP first.
This is a general config guide: K70941653: Configuring BIG-IP ASM antivirus protection
And fellow MVP Nikoolayy1 wrote a nice article on how to setup the whole things for AWAF and ICAP over TLS:
F5 ICAP over SSL/TLS (Secure ICAP) with F5 ASM/AWAF Antivirus Protection feature
My personal opinion on that: Don't use this feature. The fact that a file is sent to an ICAP server for scanning, means that the end user will experience the upload as slow or slower than usual and might become impatient.
KR
Daniel
- zamroni777
i think there are some use cases that really need the feature, such as application that expect to receive pdf or microsoft word files.
even jpeg can contain malware
https://umbrella.cisco.com/blog/picture-perfect-how-jpg-exif-data-hides-malwareas alternative to waf integrated antivirus, simply store the files in file servers that has up to date antivirus so the files are automatically inspected and cleaned.
VidalUptonNimbostratus
Ok, thanks. I will keep it in my mind.
