Forum Discussion

seilemor_131269's avatar
seilemor_131269
Icon for Altostratus rankAltostratus
Mar 10, 2014

ICAP integration will not work

Hello community,   I want to check with the ASM module uploaded files against an ICAP server (Bluecoat Proxy AV). I´ve configured the ICAP settings and the settings in the asm policy. If I now upl...
design
icap
management
security
seilemor_131269's avatar
seilemor_131269
Icon for Altostratus rankAltostratus

here are some screenshots from the settings of my asm policy regarding the AntiVirus settings.

At the moment the policy is transparent but if there is a violation I should see it in the asm log.

And here is the log of the ICAP scanner...

TIME;TIME-INT;PROTOCOL;CLIENT;SERVER;VIRUS;URL;HWSERIALNUMBER;MACHINENAME;MACHINEIP;AVVENDOR;AVENGINEVERS;AVPATTERNVERS;AVPATTERNDATE;APPVERSION
2014/03/10 14:15:49;1394460949;ICAP;10.2.160.101;;EICAR-AV-Test;;3609081087;pxghza-av5;10.160.72.18;Sophos, Plc.;3.50.1;4.98G.6465406.2540362744;2014/03/10 08:06:00;ProxyAV (Version 3.5.1.3(122676))
2014/03/10 14:16:28;1394460988;ICAP;10.2.160.101;;EICAR-AV-Test;;3609081087;pxghza-av5;10.160.72.18;Sophos, Plc.;3.50.1;4.98G.6465406.2540362744;2014/03/10 08:06:00;ProxyAV (Version 3.5.1.3(122676))
2014/03/10 14:17:10;1394461030;ICAP;10.2.160.101;;EICAR-AV-Test;;3609081087;pxghza-av5;10.160.72.18;Sophos, Plc.;3.50.1;4.98G.6465406.2540362744;2014/03/10 08:06:00;ProxyAV (Version 3.5.1.3(122676))

Do you need more informations?

boneyard's avatar
boneyard
Icon for MVP rankMVP
Mar 13, 2014
all seems fine, dont directly see a reason why this would fail, is your ICAP scanner supported by the F5? there is some config needed i believe for some other then the default.