Nimbostratusto set up an iCAP antivirus solution at F5 level in LTM:
is the f5 redirect all flows to the antivirus to scaning it or those that contain attachments?
for base64 and Json flows, how does the F5 process it to analyze their encapsulated content?
Hi,
The implementation guide states that the BIG-IP wil conditionally forward the HTTP requests to the ICAP scanner. https://techdocs.f5.com/en-us/bigip-14-0-0/big-ip-local-traffic-manager-implementations-14-0-0/configuring-content-adaptation-for-http-requests.html
So the BIG-IP doesn't analyze the data, the ICAP scanner does.
Cheers,
Kees
AltostratusResurecting this.
Requets Adapt profile detects content-type mutipart headers as upload but does not detect content(-type/Application/jason as file uploads.
Any info on how to implement other types of uploads.
AltostratusF5 states it can be done here by ICAP LTM. Wa have the same issue on ASM ICAP and decided to go with LTM ICAP.
https://support.f5.com/csp/article/K47008252
