5.2. Create Additional Services

Use the Guided Configuration wizard to edit the Services.

5.2.1. Create an ICAP Service

Use the following steps to create an ICAP inspection Service.

1. In the Topologies tab of the SSL Orchestrator > Configuration page, click on the sslo_l3_outbound Topology to edit it using the Guided Configuration UI.

   
   
   

2. To edit the Services, click on the Service icon at the top (or click on the pencil icon to the right of the Service menu item).

   
   
   

3. Click on the Add Service button to create a new Service.

   
   
   

4. Click the ICAP tab to show template for common ICAP solutions.

5. Click on the Generic ICAP Service tile and click Add (or simply double-click the Generic ICAP Service tile) to continue.

   
   
   

6. On the settings input form, enter CLAM_AV in the Name field.

   
   
   

   Note

   Only edit the fields that are explicitly mentioned below. Other fields may be left at their default values.

   
   

7. In the ICAP Devices section, click on the Add button to show the input form.

8. Enter 198.19.97.50 for the IP Address.

9. Leave the default Port value (1344).

   
   
   

10. Click Done to close the input form.

    
    
    

11. Scroll down to the Request Modification URI Path field and enter /avscan.

12. Enter /avscan for the Response Modification URI Path.

13. Enter 1048576 for the Preview Max Length(bytes).

    
    
    

14. Click Save to return to the Service list.

    
    

    Attention

    A yellow "pending changes to deploy" notification banner will appear below the Guided Configuration workflow path. As tempting as it may be, DO NOT click on the Deploy button until instructed to (later on).

    
    
    

5.2.2. Create Inline L2 (FireEye) service

Now you will create an Inline L2 service for a FireEye NX appliance.

1. Click on the Add Service button to create a new Service.

   
   
   

2. The service catalog will default to the Inline L2 tab. Double-click on the FireEye NX Inline Layer 2 tile to start configuring it.

   
   
   

3. Leave the default Name of FEYE.

   
   
   

4. In the Network Configuration section, click on the Add button and use the following settings:

   • Under From BIGIP VLAN, click on the Create New radio button.

   • Enter FEYE_in in the Name field.

   • Select 1.4 from the Interface drop-down list.

   • Leave the Tag field empty.

   • Under To BIGIP VLAN, click on the Create New radio button.

   • Enter FEYE_out in the Name field.

   • Select 1.5 from the Interface drop-down list.

   • Leave the Tag field empty.

   
   
   
   
   

5. Click on the Done button to apply the settings.

   
   
   
   
   

6. Leave the default gateway_icmp Device Monitor selection.

7. Select Enable Port Remap and set the port to 8080.

   
   
   

8. Some additional Resources will be shown. Do not modify them.

   
   
   

9. Click on the Save button to return to the Services list.

10. A yellow "pending changes" notification banner will appear again below the Guided Configuration workflow path.

    This time, click on the Deploy button to create the new Services.

    
    
    

11. Click on the OK button when the deployment has completed and you will return to the Topologies list.

5.2.3. Deployed Services List

1. Click on the Services tab to check that all three Services are present.

Note that the Services are also represented in the SSL Orchestrator configuration diagram.