For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Kevin_Stewart's avatar
Kevin_Stewart
Icon for Employee rankEmployee
Aug 25, 2015

You're pretty much stuck with SNAT as long as all of the clients and servers are on the same subnet. So you really have two options:

 

  1. Move your ACLs to the BIG-IP, as arpydays relates.

     

  2. If this is HTTP traffic you can inject an X-Forwarded-For header with the real client address and configure your servers to look for the XFF HTTP header instead of layer 3 IP addresses.