Forum Discussion
CirrostratusASM INtegrated services
MVPHi THE_BLUE,
it won't work out the box, you have to configure ICAP first.
This is a general config guide: K70941653: Configuring BIG-IP ASM antivirus protection
And fellow MVP Nikoolayy1 wrote a nice article on how to setup the whole things for AWAF and ICAP over TLS:
F5 ICAP over SSL/TLS (Secure ICAP) with F5 ASM/AWAF Antivirus Protection feature
My personal opinion on that: Don't use this feature. The fact that a file is sent to an ICAP server for scanning, means that the end user will experience the upload as slow or slower than usual and might become impatient.
KR
Daniel
MVPi think there are some use cases that really need the feature, such as application that expect to receive pdf or microsoft word files.
even jpeg can contain malware
https://umbrella.cisco.com/blog/picture-perfect-how-jpg-exif-data-hides-malware
as alternative to waf integrated antivirus, simply store the files in file servers that has up to date antivirus so the files are automatically inspected and cleaned.
