Lab 1.3: ICAP Service

Task 1 - Create SSLO ICAP Service

A Service is a collection of security devices that will receive decrypted traffic from the SSLO solution. In this section, an ICAP Service will be created. An ICAP Service would typically be an Anti-Virus or DLP solution. It is important to have the correct Request and Response URIs for the solution and the appropriate Preview Max Length.

  1. Login to the BIG-IP with Firefox

  2. Navigate to SSL Orchestrator ‣ Deployment ‣ Deployment Settings and click:

    image4

  3. On the menu across the top of the main window pane, navigate to Services ‣ ICAP Services and click:

    image12

  4. Click Create on the far right

    image13

  5. Enter the following values:

    Property

    Value

    Name

    ssloS_ICAP_service

    ICAP Devices –> IP Address

    10.70.0.10 (click Add)

    Request

    Replace /req with /squidclamav

    Response

    Replace /res with /squidclamav

    Preview Max Length

    1048576

  6. Once your settings look like the following screenshot, click Finish:

    image14