For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Harry1's avatar
Harry1
Icon for Nimbostratus rankNimbostratus
Sep 08, 2016

dont want to use snat automap in network access

Hi,   I am using network access vpn with snat automap feature in APM-network access. now as per requirement,to visible actual client ip in firewall from sslvpn connection is made. but at present f...
application delivery
BIG-IP Access Policy Manager (APM)
Samir_Jha_52506's avatar
Samir_Jha_52506
Icon for Noctilucent rankNoctilucent
Sep 08, 2016

You can use SNAT automap with X-forward profile to get client IP.

 

IainThomson85_1's avatar
IainThomson85_1
Icon for Cumulonimbus rankCumulonimbus
Sep 08, 2016

The X-Forward-For IP will only insert the "True ip" in the HTTP Header, it won't change the IP that the firewall sees (Unless it can use Layer7 information)

 

Why are you using SNAT AUtomap in the firstplace ? Is this to get round a routing issue in a One-Arm deployment?

 

Can you create a two-arm deployment so Automap isn't required ?