Forum Discussion

ELORF's avatar
ELORF
Icon for Nimbostratus rankNimbostratus
Sep 19, 2019

problem integrating icap into asm of F5 14.1

I followed this tutorial https://support.f5.com/csp/article/K70941653

but i have a problem in integrating icap into asm of F5 14.1,

asm does not send files to icap Trend Micro antivirus.

I have configured the IP address, the port and the iCAP_URI (/ reqmod, / REQ-Service, / AVSCAN)

no result!!!

ASM Advanced WAF
icap
security
  • Simon_Blakely's avatar
    Simon_Blakely
    Icon for Employee rankEmployee
    Sep 22, 2019

    ASM needs to see the file upload in a multipart form with the file name specified as a parameter before it can send the request to ICAP.

     

    If you just POST the file, then ASM cannot (currently) detect the upload and send it to ICAP.

  • ELORF's avatar
    ELORF
    Icon for Nimbostratus rankNimbostratus
    Sep 23, 2019

    Thank you for your reply

    How to configure this setting to send files at ASM level?

  • Simon_Blakely's avatar
    Simon_Blakely
    Icon for Employee rankEmployee
    Sep 23, 2019

    This is application level behaviour within the web application itself - there isn't any configuration in ASM to enable this behaviour.

    https://developer.mozilla.org/en-US/docs/Web/HTTP/Methods/POST

    -----

    POST /test HTTP/1.1 
Host: foo.example
Content-Type: multipart/form-data;boundary="boundary" 
 
--boundary 
Content-Disposition: form-data; name="field1" 
 
value1 
--boundary 
Content-Disposition: form-data; name="field2"; filename="example.txt" 
 
value2
--boundary--