For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

ELORF's avatar
ELORF
Icon for Nimbostratus rankNimbostratus
Sep 19, 2019

problem integrating icap into asm of F5 14.1

I followed this tutorial https://support.f5.com/csp/article/K70941653

but i have a problem in integrating icap into asm of F5 14.1,

asm does not send files to icap Trend Micro antivirus.

I have configured the IP address, the port and the iCAP_URI (/ reqmod, / REQ-Service, / AVSCAN)

no result!!!

ASM Advanced WAF
icap
security

3 Replies

  • Simon_Blakely's avatar
    Simon_Blakely
    Icon for Employee rankEmployee
    Sep 22, 2019

    ASM needs to see the file upload in a multipart form with the file name specified as a parameter before it can send the request to ICAP.

     

    If you just POST the file, then ASM cannot (currently) detect the upload and send it to ICAP.

  • ELORF's avatar
    ELORF
    Icon for Nimbostratus rankNimbostratus
    Sep 23, 2019

    Thank you for your reply

    How to configure this setting to send files at ASM level?

  • Simon_Blakely's avatar
    Simon_Blakely
    Icon for Employee rankEmployee
    Sep 23, 2019

    This is application level behaviour within the web application itself - there isn't any configuration in ASM to enable this behaviour.

    https://developer.mozilla.org/en-US/docs/Web/HTTP/Methods/POST

    -----

    POST /test HTTP/1.1 
Host: foo.example
Content-Type: multipart/form-data;boundary="boundary" 
 
--boundary 
Content-Disposition: form-data; name="field1" 
 
value1 
--boundary 
Content-Disposition: form-data; name="field2"; filename="example.txt" 
 
value2
--boundary--