Issue with HTTP profile X-Forwarder-For and AFM

Hi Dave,

Is this encrypted HTTPS traffic? If so and you want BIG-IP to insert an XFF header, you'll need to import a valid server cert and key, create a client SSL profile and then add both the client SSL and HTTP profiles to the virtual server. This allows BIG-IP to decrypt the SSL and modify the HTTP headers to insert the XFF header.

If this doesn't work for you, please reply with your BIG-IP version, virtual server, client SSL profile and HTTP profile config. You can copy these from the bigip.conf or list the config using tmsh.

Aaron