LTM ICAP via Internal VS and possible ASM integration

Hi,

 

I've been told by F5 FSE that if we do ICAP via LTM and internal VS instead of ASM for AV Scanning of uploads (to get round buffer size limitation) we can use new rule events in v11.5 to raise ASM violations and even blocking response behaviours.

 

I'm trying to understand how this would work as I believe these are new ASM events for raising custom violations etc, therefore requiring ASM to handle the traffic...

 

has anyone had any experience with how you would integration LTM based ICAP with ASM violations?