For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

seilemor_131269's avatar
seilemor_131269
Icon for Altostratus rankAltostratus
Mar 10, 2014

ICAP integration will not work

Hello community,   I want to check with the ASM module uploaded files against an ICAP server (Bluecoat Proxy AV). I´ve configured the ICAP settings and the settings in the asm policy. If I now upl...
design
icap
management
security
seilemor_131269's avatar
seilemor_131269
Icon for Altostratus rankAltostratus
Mar 12, 2014

here are some screenshots from the settings of my asm policy regarding the AntiVirus settings.

At the moment the policy is transparent but if there is a violation I should see it in the asm log.

And here is the log of the ICAP scanner...

TIME;TIME-INT;PROTOCOL;CLIENT;SERVER;VIRUS;URL;HWSERIALNUMBER;MACHINENAME;MACHINEIP;AVVENDOR;AVENGINEVERS;AVPATTERNVERS;AVPATTERNDATE;APPVERSION
2014/03/10 14:15:49;1394460949;ICAP;10.2.160.101;;EICAR-AV-Test;;3609081087;pxghza-av5;10.160.72.18;Sophos, Plc.;3.50.1;4.98G.6465406.2540362744;2014/03/10 08:06:00;ProxyAV (Version 3.5.1.3(122676))
2014/03/10 14:16:28;1394460988;ICAP;10.2.160.101;;EICAR-AV-Test;;3609081087;pxghza-av5;10.160.72.18;Sophos, Plc.;3.50.1;4.98G.6465406.2540362744;2014/03/10 08:06:00;ProxyAV (Version 3.5.1.3(122676))
2014/03/10 14:17:10;1394461030;ICAP;10.2.160.101;;EICAR-AV-Test;;3609081087;pxghza-av5;10.160.72.18;Sophos, Plc.;3.50.1;4.98G.6465406.2540362744;2014/03/10 08:06:00;ProxyAV (Version 3.5.1.3(122676))

Do you need more informations?

  • boneyard's avatar
    boneyard
    Icon for MVP rankMVP
    Mar 13, 2014
    all seems fine, dont directly see a reason why this would fail, is your ICAP scanner supported by the F5? there is some config needed i believe for some other then the default.