NimbostratusHi,
I don't know if this is still relevant to anyone, but I have just used a standard HTTP monitor (since ICAP is clear text as well) and the ICAP OPTIONS method:
https://tools.ietf.org/html/rfc3507section-4.10.1
send "OPTIONS icap://ICAP_SERVER ICAP/1.0\r\n\r\n"
recv "ICAP/1.0 200 OK"
NimbostratusI was exactly looking for this and it works perfectly.
Thanks a lot!
AltostratusHi Artiom,
Thanks for sharing. Would you have an idea if you can replace "ICAP_SERVER" with a variable? Would be good to do if you have multiple AV appliance in a pool.
Thanks in advance. :)
Hi,
 
This is supported with External monitors:
 
https://devcentral.f5.com/s/articles/ltm-external-monitors-the-basics
 
You can pass environment variables and command line arguments to a custom script.
 
Hope this helps.
 
AltostratusThanks for link but it seems like it is not required.
Here is my send string "OPTIONS icap://avscanner/avscan ICAP/1.0\r\n\r\n" and managed to get a response.
***** WORKING CAPTURE *****
OPTIONS icap://avscanner/avscan ICAP/1.0
ICAP/1.0 200 OK Date: Tue, 20 Feb 2018 07:16:34 GMT Methods: RESPMOD, REQMOD Service: ProxyAV AV scanner 3.5.4.1(182496) ISTag: "1519109626" Service-ID: avscanner Encapsulated: null-body=0 Max-Connections: 100 X-Include: X-Server-IP, X-Client-IP Allow: 204 X-Scan-Progress-Interval: 3 X-Abandon-Supported: 1 ***** WORKING CAPTURE *****
Yeah, sure. I just thought you need per-monitor ability to use dynamic variables.
Glad you made it work!