ICAP Server with VIRUS DETECTED: Scan Error

Wing_Chow — Thu, 06 Jun 2019 21:45:19 GMT

Hi all,

I think that you can help me with this type of error when i'm implement a ICAP Server in R80.20..

I need to configure with F5 and Sandblast for ICAP HTTP Emulation. I've tried with "sk" and admin guide for Threat Prevention about ICAP Server and all those information can't work fine 😞

This is the Error in the Check Point Devices:

VIRUS DETECTED: Scan Error , http client ip: xx.xxx.xxx.xx, http user: -, http url: my.sites.com

ICAP Client Configuration

F5 BigIP LTM

ICAP Profile:

URI: icap://${SERVER_IP}:${SERVER_PORT}/virus_scan

Headers: X-Client-IP, X-Server-IP, X-Authentication-User

How to can i configure a good integration with ICAP Client and Check Point ICAP Server?

Thanks!!

Regards,

Re: ICAP Server with VIRUS DETECTED: Scan Error

PhoneBoy — Sun, 09 Jun 2019 02:50:50 GMT

Looks like someone got this working previously.
See: https://community.checkpoint.com/t5/SandBlast-Network/F5-BIG-IP-ICAP-and-SandBlast-TEX/m-p/40584

topic ICAP Server with VIRUS DETECTED: Scan Error in Firewall and Security Management

ICAP Server with VIRUS DETECTED: Scan Error

Re: ICAP Server with VIRUS DETECTED: Scan Error