Forum Discussion

Wasfi_Bounni's avatar
Wasfi_Bounni
Icon for Cirrocumulus rankCirrocumulus
Jun 23, 2023

What should the URL start with in an ICAP profile? ICAP or ICAPs

Hi;

What should the URL start with in an ICAP profile? ICAP or ICAPs

The ICAP session between the F5 LTM and the ICAP scanner is encrypted over TLS.

Kindly

Wasfi

    • Wasfi_Bounni's avatar
      Wasfi_Bounni
      Icon for Cirrocumulus rankCirrocumulus

      Yes, exactly Mohamed.

      If I am encrypting the ICAP session between the F5 and the ICAP scanner, then the question is:

      Is it 

      icap://${SERVER_IP}:${SERVER_PORT}/virusScan

      or

      icaps://${SERVER_IP}:${SERVER_PORT}/virusScan

      • Hi Wasfi_Bounni , 

        Okay , 

        using internal Virtual server you have ( Server ssl profile ) you must add it , by adding it between Bigip and ICap server so >>> Bigip will be able to establish a secure connection with ICAP servers. 

        So First add ( server ssl ) on the internal virtual server that sends ICAP requests to your ICAP servers. 

        the second thing >>> I haven't seen icaps protocol before. 
        So I'm recommending this :  icap://${SERVER_IP}:${SERVER_PORT}/virusScan .

        Like I said >>> Bigip can open a secure connection with Icap servers by using server ssl profile in internal virtual servers.

        Try this and give me your feedback.