For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Wasfi_Bounni's avatar
Wasfi_Bounni
Icon for Cirrocumulus rankCirrocumulus
Jun 23, 2023

What should the URL start with in an ICAP profile? ICAP or ICAPs

Hi; What should the URL start with in an ICAP profile? ICAP or ICAPs The ICAP session between the F5 LTM and the ICAP scanner is encrypted over TLS. Kindly Wasfi
application delivery
security
Mohamed_Ahmed_Kansoh's avatar
Mohamed_Ahmed_Kansoh
Icon for MVP rankMVP
Jun 23, 2023

Hi Wasfi_Bounni  , 

Do you mean this URL : icap://${SERVER_IP}:${SERVER_PORT}/virusScan

 

 Or I Miss something.

Wasfi_Bounni's avatar
Wasfi_Bounni
Icon for Cirrocumulus rankCirrocumulus
Jun 23, 2023

Yes, exactly Mohamed.

If I am encrypting the ICAP session between the F5 and the ICAP scanner, then the question is:

Is it 

icap://${SERVER_IP}:${SERVER_PORT}/virusScan

or

icaps://${SERVER_IP}:${SERVER_PORT}/virusScan

  • Mohamed_Ahmed_Kansoh's avatar
    Mohamed_Ahmed_Kansoh
    Icon for MVP rankMVP
    Jun 23, 2023

    Hi Wasfi_Bounni , 

    Okay , 

    using internal Virtual server you have ( Server ssl profile ) you must add it , by adding it between Bigip and ICap server so >>> Bigip will be able to establish a secure connection with ICAP servers. 

    So First add ( server ssl ) on the internal virtual server that sends ICAP requests to your ICAP servers. 

    the second thing >>> I haven't seen icaps protocol before. 
    So I'm recommending this :  icap://${SERVER_IP}:${SERVER_PORT}/virusScan .

    Like I said >>> Bigip can open a secure connection with Icap servers by using server ssl profile in internal virtual servers.

    Try this and give me your feedback.

    • Wasfi_Bounni's avatar
      Wasfi_Bounni
      Icon for Cirrocumulus rankCirrocumulus
      Jun 23, 2023

      Will test on Monday and let you know.