For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

mattsthe2_59142's avatar
mattsthe2_59142
Icon for Nimbostratus rankNimbostratus
Jul 10, 2015

ICAP with iRule Response Page

We are running version 11.6   We originally had ASM configured to send files to a Symantec server for scanning and if a Virus was detected the ASM would display the Blocking Response page. (all go...
application delivery
ASM Advanced WAF
icap
LTM
security
arpydays's avatar
arpydays
Icon for Nimbostratus rankNimbostratus
Jul 12, 2015

Same deal here, we were told we could use LTM ICAP and tie it in with custom ASM violations. We were thinking about capturing the ICAP_Response error and passing this to ASM triggering a custom violation after the ASM_REQUEST_END event. I think the problem is that the ASM event will fire before the ICAP_Response as the ICAP irule is on the Internal VS, which processes the request after the HTTP VS, I'll have a chat to F5 about this in the week.