For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Pihu_294516's avatar
Pihu_294516
Icon for Altostratus rankAltostratus
Jun 23, 2018

Account lock out issue

Hello folks,   I am a newbie and trying to help a user to troubleshoot his lock out issue. The details explanation for this goes ...   We have an ADFS VIP running on port 443 and 49443 set up t...
application delivery
BIG-IP
LTM
rafaelbn's avatar
rafaelbn
Icon for Cirrostratus rankCirrostratus
Jun 24, 2018

Hello Pihu!

Since you're SNATing, you have to look inside that tcpdump for the x-forward-for with the original client's IP.

I think Wireshark's filter for this would be something like this (not sure though):

http.x_forwarded_for == 10.0.0.1

Just replace "10.0.0.1" with the client's IP and have a try.

Cheers!