Forum Discussion

Tushar_K's avatar
Tushar_K
Icon for Altostratus rankAltostratus
May 22, 2017

Request come on WAF with single source IP

Hi We have F5 WAF in our environment where one of application is hosted. It is internet application where all users accessing application over internet. When user access application over internet request coming to firewall first and from firewall public ip is natted with private IP which is VIP of F5 WAF. As there is SNAT done on firewall at F5 WAF we are getting only source IP as firewall IP. As we are getting all request from single source IP on WAF we want to just know from WAF architecture point of view does it is proper architecture ? Does it required that actual client IP required to come on WAF?

 

ASM Advanced WAF
security
  • Chris_Grant's avatar
    Chris_Grant
    Icon for Employee rankEmployee
    May 25, 2017

    You can set the ASM to trust x-forwarded-for (or a customer header of your choosing) and read the client's IP from that. You will need to configure your firewall to insert the proper header, however.