F5 ASM and Antivirus

Hope this link will help, i think you can do this with a custom http icap profile.

Hello,

Have you associated following profiles to your VS (that applies the ASM profile) :

• A "HTTP Profile"
• A "Request Adapt Profile" // if your ICAP server need to inspect client request
• A "Response Adapte Profile" // if your ICAP server need to inspect backend servers responses

You will also need to create a second VS (type "Internal") that will load balance traffic forwarded by the first VS to your ICAP servers. For this internal VS you will need to assign an "ICAP" profile.

Following KB gives details about the implementation of ICAP

Regards