For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

GGoran_276252's avatar
GGoran_276252
Icon for Nimbostratus rankNimbostratus
Jul 20, 2016

F5 with Symantec external antivirus (ICAP protocol)

Hi, first time asking a question here. We're trying to setup an F5 ASM to forward files to external antivirus for scanning (Symantec Protection Engine for Cloud Services) with ICAP protocol. There ha...
ASM Advanced WAF
BIG-IP
security
Hannes_Rapp_162's avatar
Hannes_Rapp_162
Icon for Nacreous rankNacreous
Jul 20, 2016

A simple starter: Have you checked your ASM policy blocking settings - Do you have "block" flag ticked for "Virus detected"?

 

GGoran_276252's avatar
GGoran_276252
Icon for Nimbostratus rankNimbostratus
Jul 20, 2016

We changed the virus_header_name to X-Violations-Found and icap_uri to /symcscanreq-av-url as default values are for McAfee.

 

Not sure if you meant anything else by it?