Forum Discussion

oosama123_34611's avatar
oosama123_34611
Icon for Nimbostratus rankNimbostratus
Jan 10, 2018

Bluecaot ASG as ICAP server

hi everyone, am new with F5 products we have ASM - 12.1.2 - , am trying to add bluecaot as icap server , our bluecaot is have a content filter license and kasperSky AV. i did all the steps , still not working , when i check the log its saying : "Virus detection was not performed due to communication problem. See details here: /ts/log/bd.log"

 

for icap_uri = /reqmod for virus_header_name = X-Virus-ID i tried to open ticket but they are saying they don't know about bluecaot , i tried also download a trail version of Symantec scan engine for cloud with same error.

 

if you want more please let me , i don't know what to share with you . thank you in advance.

 

ASM Advanced WAF
security
  • Leonardo_Souza's avatar
    Leonardo_Souza
    Icon for Cirrocumulus rankCirrocumulus
    Jan 10, 2018

    I found this document (BlueCoat is now Symantec, as far as I know):

     

     

    Besides the normal ASM configuration for ICAP, you also have to make sure some system variables matches your antivirus solution:

     

    Security > Options > Application Security > Advanced Configuration > System Variables

     

    Check icap_uri and virus_healder_name.

     

    Here is the F5 solution about that:

     

    https://support.f5.com/csp/article/K70941653

     

    What F5 support meant, probably, is that they don't know those settings for all antivirus vendors. The system is setup to McAfee by default.

     

    I look this in the past, and there is no table with this settings per vendor.