23-Jun-2023 04:31
Hi;
What should the URL start with in an ICAP profile? ICAP or ICAPs
The ICAP session between the F5 LTM and the ICAP scanner is encrypted over TLS.
Kindly
Wasfi
23-Jun-2023 04:52
Hi @Wasfi_Bounni ,
Do you mean this URL : icap://${SERVER_IP}:${SERVER_PORT}/virusScan
Or I Miss something.
23-Jun-2023 05:02
Yes, exactly Mohamed.
If I am encrypting the ICAP session between the F5 and the ICAP scanner, then the question is:
Is it
icap://${SERVER_IP}:${SERVER_PORT}/virusScan
or
icaps://${SERVER_IP}:${SERVER_PORT}/virusScan
23-Jun-2023 05:57
Hi @Wasfi_Bounni ,
Okay ,
using internal Virtual server you have ( Server ssl profile ) you must add it , by adding it between Bigip and ICap server so >>> Bigip will be able to establish a secure connection with ICAP servers.
So First add ( server ssl ) on the internal virtual server that sends ICAP requests to your ICAP servers.
the second thing >>> I haven't seen icaps protocol before.
So I'm recommending this : icap://${SERVER_IP}:${SERVER_PORT}/virusScan .
Like I said >>> Bigip can open a secure connection with Icap servers by using server ssl profile in internal virtual servers.
Try this and give me your feedback.
23-Jun-2023 10:27
Will test on Monday and let you know.