Forum Discussion
M_Hallster_2314
Oct 29, 2015Nimbostratus
Thank you IheartF5 for the response. Now that I've done more reading, I should've said ICAP Server instead of proxy. From additional reading and looking at the diagram in the link you provided, I would need to standup an ICAP server (pretty sure ClamAV does not provide this capability). With all that said, from my understanding with Big-IP 10.6, all you have to do is configure anti-Virus Protection (under Integrated Services) and files (under 20MB) are automatically sent to the ICAP server (see inserted pic).
- APMar 03, 2016NimbostratusHi, How did you go integrating with ClamAV? Any issues? I'm currently integrating ASM with SquidClamAV and having issues, however it seems the Squid component is really redundant since the F5 is the proxy, so I'm not sure that the 3rd party looking after SquidClamAV server has their solution configured to work as just an ICAP Server + ClamAV. Wondering if anyway has any experience or tips with SquidClamAV? Thanks
- APMar 08, 2016NimbostratusFor anyone interested, it seems that C-ICAP Server, which is commonly used in conjuction with ClamAV and is also part of the SquidClamAV solution, does not work with file uploads as part of POST requests. In particular, we were trying to send multi-part form file uploads for scanning, but CLAMAV doesn't receive the full payload. The c-icap developer himself even mentions: "The virus_scan module can not scan uploaded data (eg those which included in a POST request). It scans only downloaded data."