OPSWAT Integration with F5

For inbound use cases, here is an article that talks about how to configure MetaDefender ICAP to scan incoming SSL-offloaded (BIG-IP has the serverssl cert and key and talks HTTP to the pool member) web traffic:

https://docs.opswat.com/mdicap/integrations/f5-big-ip-asm--waf-

For outbound use cases where BIG-IP has to un-wrap the SSL (BIG-IP does not have the serverssl cert and key), we have a module called "SSL Orchestrator" that can man-in-the-middle outbound connections and utilize a variety of ICAP or inline-HTTP servers for content scanning.