For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

mattsthe2_59142's avatar
mattsthe2_59142
Icon for Nimbostratus rankNimbostratus
Jul 10, 2015

ICAP with iRule Response Page

We are running version 11.6   We originally had ASM configured to send files to a Symantec server for scanning and if a Virus was detected the ASM would display the Blocking Response page. (all go...
application delivery
ASM Advanced WAF
icap
LTM
security
Andras_Kis-Szab's avatar
Andras_Kis-Szab
Icon for Nimbostratus rankNimbostratus
Feb 22, 2016

The ICAP URL should be:

uri icap://${SERVER_IP}:${SERVER_PORT}/AVSCANREQ\?action=scan

The SYMC* requests uses a different responses (
201 - abort
) instead of (
200 - respond
)

ADAPT and parent VS OOPS on the 201 response. The response delivered from SYMC server to the client with this compatibility-mode request