Forum Discussion

3 Replies

  • Colin_Rogers_17's avatar
    Colin_Rogers_17
    Historic F5 Account

    Hello Sekhar,

     

    You can use ICAP on the BigIP for this. You will need an ICAP server but that is what ICAP is used for amongst other things. It will scan the attachments and if your ICAP server allows that attachment it will advise the BigIP to pass the attachment through or it can advise us to block it.

     

    That would be a great place to start.

     

    • Sekhar's avatar
      Sekhar
      Icon for Nimbostratus rankNimbostratus
      Thank you. But it requires ASM module license if I am not wrong. Also, does the ICAP scan outbound mail too? Is there any way we can scan just using LTM+APM module? Thanks, Sekhar
    • Colin_Rogers_17's avatar
      Colin_Rogers_17
      Historic F5 Account
      You dont need ASM for ICAP. It is on the LTM side. You can use it with LTM + APM for sure. Its the ICAP server that does the scanning so you can have it scan requests and responses. Here is a good article: https://support.f5.com/kb/en-us/products/big-ip_ltm/manuals/product/ltm-implementations-12-0-0/16.html Hope that helps!