Forum Discussion

Cirrocumulus

Jun 23, 2023

What should the URL start with in an ICAP profile? ICAP or ICAPs

Hi; What should the URL start with in an ICAP profile? ICAP or ICAPs The ICAP session between the F5 LTM and the ICAP scanner is encrypted over TLS. Kindly Wasfi

application delivery

security

Wasfi_Bounni

Cirrocumulus

Jun 23, 2023

Yes, exactly Mohamed.

If I am encrypting the ICAP session between the F5 and the ICAP scanner, then the question is:

Is it

icap://${SERVER_IP}:${SERVER_PORT}/virusScan

icaps://${SERVER_IP}:${SERVER_PORT}/virusScan

Mohamed_Ahmed_Kansoh

MVP

Jun 23, 2023

Hi Wasfi_Bounni ,

Okay ,

using internal Virtual server you have ( Server ssl profile ) you must add it , by adding it between Bigip and ICap server so >>> Bigip will be able to establish a secure connection with ICAP servers.

So First add ( server ssl ) on the internal virtual server that sends ICAP requests to your ICAP servers.

the second thing >>> I haven't seen icaps protocol before.
So I'm recommending this : icap://${SERVER_IP}:${SERVER_PORT}/virusScan .

Like I said >>> Bigip can open a secure connection with Icap servers by using server ssl profile in internal virtual servers.

Try this and give me your feedback.