Forum Discussion
NimbostratusASM Geolocation to block Exchange 2016 with APM
Hello,
I have the Exchange 2016 with LTM and APM (using iApps) all working fine with APM and LTM. Now I enable the ASM with main goal to use the Geolocation protection but is not blocking or doing anything. I do have the XFF enable and I can see in the sessions the correct source IP but the ASM is not blocking it, any idea?
1 Reply
youssef1Cumulonimbus
Hi,
You have to check "Trust XFF Header" (Trusting X-Forwarded-For headers in the BIG-IP ASM system):
Security ›› Application Security : Policy : Policy Properties then chec "Trust XFF Header".
You have here article about this functionnality:
https://support.f5.com/csp/article/K12264
You can also set you Geoloc restriction in APM: K79414542: Configuring geolocation enforcement
https://support.f5.com/csp/article/K79414542
regards
