Forum Discussion

Wasfi_Bounni's avatar
Wasfi_Bounni
Icon for Cirrocumulus rankCirrocumulus
Jun 23, 2023

What should the URL start with in an ICAP profile? ICAP or ICAPs

Hi; What should the URL start with in an ICAP profile? ICAP or ICAPs The ICAP session between the F5 LTM and the ICAP scanner is encrypted over TLS. Kindly Wasfi
application delivery
security
Wasfi_Bounni's avatar
Wasfi_Bounni
Icon for Cirrocumulus rankCirrocumulus
Jun 23, 2023

Yes, exactly Mohamed.

If I am encrypting the ICAP session between the F5 and the ICAP scanner, then the question is:

Is it 

icap://${SERVER_IP}:${SERVER_PORT}/virusScan

or

icaps://${SERVER_IP}:${SERVER_PORT}/virusScan

Mohamed_Ahmed_Kansoh's avatar
Mohamed_Ahmed_Kansoh
Icon for MVP rankMVP
Jun 23, 2023

Hi Wasfi_Bounni , 

Okay , 

using internal Virtual server you have ( Server ssl profile ) you must add it , by adding it between Bigip and ICap server so >>> Bigip will be able to establish a secure connection with ICAP servers. 

So First add ( server ssl ) on the internal virtual server that sends ICAP requests to your ICAP servers. 

the second thing >>> I haven't seen icaps protocol before. 
So I'm recommending this :  icap://${SERVER_IP}:${SERVER_PORT}/virusScan .

Like I said >>> Bigip can open a secure connection with Icap servers by using server ssl profile in internal virtual servers.

Try this and give me your feedback.

  • Wasfi_Bounni's avatar
    Wasfi_Bounni
    Icon for Cirrocumulus rankCirrocumulus
    Jun 23, 2023

    Will test on Monday and let you know.