Forum Discussion

imranHaider's avatar
imranHaider
Icon for Altostratus rankAltostratus
Apr 05, 2020

How to disable preview if using iCAP via ASM

Hello,   i have an iCAP server configured via ASM. The basic connectivity is OK however when the ASM send an attachment to the icap server (fortinet sandbox), the sandbox replies back instantly w...
ASM Advanced WAF
security
  • Lidev's avatar
    Lidev
    Apr 07, 2020

    Not all webtraffic, only the one with attachment.

    yes, the processing add a little latency but invisible for the end user.

    if you are satisfied with the answer, don't forget to mark the answer solved.

imranHaider's avatar
imranHaider
Icon for Altostratus rankAltostratus

I have configured adapt profile and i can see that the communication is happening. I also see the file received by the AV server and scanned, while at the same instant the F5 sends a connection reset 104.

 

below logs from AV server

2020-04-07 23:51:36 172.19.0.9 socket error [Errno 104] Connection reset by peer

2020-04-07 23:51:36 File from ICAP client (172.18.4.10)(self IP) was submitted. client_ip=137.210.92.58 sha256=4c11e6e120d335f8ca85af0aa3f4f12151a8e3de486b0ac8e9

66d6e8e512992a fname=vpn8.PNG

2020-04-07 23:51:36 172.18.4.10(self IP) socket error [Errno 104] Connection reset by peer

 

in /var/log/ltm i see below

 

Apr 8 00:15:08 lab-F5.com err tmm3[20599]: 01aa0003:3: ICAP (137.210.92.58:59860 -> 172.16.6.6:443): Parsing ICAP response headers failed

172.16.6.6 is the webserver VIP on LTM

 

i dont find much info about this error 104. Appreciate your help,thanks