For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

paulpatriot_129's avatar
paulpatriot_129
Icon for Nimbostratus rankNimbostratus
Dec 17, 2013

load balancing to log servers SNAT shows as the source

We are trying to load balance log servers on a different subnet then the F5. When we do this the SNAT address shows up as the source instead of the actual server. So the logs look as if they are comi...
design
giltjr's avatar
giltjr
Icon for Nimbostratus rankNimbostratus
Dec 18, 2013

IP does not have a "original" IP address or "original" device identifier.

 

What you MIGHT be able to do if you have a enough IP addresses in the subnet your syslog server is on is do a static one-to-one SNAT. So that each real device has a specific SNAT address. This assumes you don't have a ton of devices though.