Forum Discussion

Wasfi_Bounni's avatar
Wasfi_Bounni
Icon for Cirrocumulus rankCirrocumulus
Jun 23, 2023

What should the URL start with in an ICAP profile? ICAP or ICAPs

Hi;

What should the URL start with in an ICAP profile? ICAP or ICAPs

The ICAP session between the F5 LTM and the ICAP scanner is encrypted over TLS.

Kindly

Wasfi

application delivery
security
    • Wasfi_Bounni's avatar
      Wasfi_Bounni
      Icon for Cirrocumulus rankCirrocumulus
      Jun 23, 2023

      Yes, exactly Mohamed.

      If I am encrypting the ICAP session between the F5 and the ICAP scanner, then the question is:

      Is it 

      icap://${SERVER_IP}:${SERVER_PORT}/virusScan

      or

      icaps://${SERVER_IP}:${SERVER_PORT}/virusScan

      • Mohamed_Ahmed_Kansoh's avatar
        Mohamed_Ahmed_Kansoh
        Icon for MVP rankMVP
        Jun 23, 2023

        Hi Wasfi_Bounni , 

        Okay , 

        using internal Virtual server you have ( Server ssl profile ) you must add it , by adding it between Bigip and ICap server so >>> Bigip will be able to establish a secure connection with ICAP servers. 

        So First add ( server ssl ) on the internal virtual server that sends ICAP requests to your ICAP servers. 

        the second thing >>> I haven't seen icaps protocol before. 
        So I'm recommending this :  icap://${SERVER_IP}:${SERVER_PORT}/virusScan .

        Like I said >>> Bigip can open a secure connection with Icap servers by using server ssl profile in internal virtual servers.

        Try this and give me your feedback.