Forum Discussion
Nimbostratusicap Antivirus with F5 Big IP
to set up an iCAP antivirus solution at F5 level in LTM:
is the f5 redirect all flows to the antivirus to scaning it or those that contain attachments?
for base64 and Json flows, how does the F5 process it to analyze their encapsulated content?
3 Replies
Hi,
The implementation guide states that the BIG-IP wil conditionally forward the HTTP requests to the ICAP scanner. https://techdocs.f5.com/en-us/bigip-14-0-0/big-ip-local-traffic-manager-implementations-14-0-0/configuring-content-adaptation-for-http-requests.html
So the BIG-IP doesn't analyze the data, the ICAP scanner does.
Cheers,
Kees
JoeTheFifthAltostratus
Resurecting this.
Requets Adapt profile detects content-type mutipart headers as upload but does not detect content(-type/Application/jason as file uploads.
Any info on how to implement other types of uploads.
- JoeTheFifth
F5 states it can be done here by ICAP LTM. Wa have the same issue on ASM ICAP and decided to go with LTM ICAP.
https://support.f5.com/csp/article/K47008252
