Forum Discussion

Wasfi_Bounni's avatar
Wasfi_Bounni
Icon for Cirrocumulus rankCirrocumulus
Jun 23, 2023

What should the URL start with in an ICAP profile? ICAP or ICAPs

Hi; What should the URL start with in an ICAP profile? ICAP or ICAPs The ICAP session between the F5 LTM and the ICAP scanner is encrypted over TLS. Kindly Wasfi
application delivery
security
Mohamed_Ahmed_Kansoh's avatar
Mohamed_Ahmed_Kansoh
Icon for MVP rankMVP
Jun 23, 2023

Hi Wasfi_Bounni  , 

Do you mean this URL : icap://${SERVER_IP}:${SERVER_PORT}/virusScan

 

 Or I Miss something.

  • Wasfi_Bounni's avatar
    Wasfi_Bounni
    Icon for Cirrocumulus rankCirrocumulus
    Jun 23, 2023

    Yes, exactly Mohamed.

    If I am encrypting the ICAP session between the F5 and the ICAP scanner, then the question is:

    Is it 

    icap://${SERVER_IP}:${SERVER_PORT}/virusScan

    or

    icaps://${SERVER_IP}:${SERVER_PORT}/virusScan

    • Mohamed_Ahmed_Kansoh's avatar
      Mohamed_Ahmed_Kansoh
      Icon for MVP rankMVP
      Jun 23, 2023

      Hi Wasfi_Bounni , 

      Okay , 

      using internal Virtual server you have ( Server ssl profile ) you must add it , by adding it between Bigip and ICap server so >>> Bigip will be able to establish a secure connection with ICAP servers. 

      So First add ( server ssl ) on the internal virtual server that sends ICAP requests to your ICAP servers. 

      the second thing >>> I haven't seen icaps protocol before. 
      So I'm recommending this :  icap://${SERVER_IP}:${SERVER_PORT}/virusScan .

      Like I said >>> Bigip can open a secure connection with Icap servers by using server ssl profile in internal virtual servers.

      Try this and give me your feedback.

      • Wasfi_Bounni's avatar
        Wasfi_Bounni
        Icon for Cirrocumulus rankCirrocumulus
        Jun 23, 2023

        Will test on Monday and let you know.