For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Cameron_14291's avatar
Cameron_14291
Icon for Nimbostratus rankNimbostratus
Apr 24, 2012

SNAT IP is messing up Auditing

Greetings....     I am an F5 newbie.   We have a VIP set up using SNAT to access our Application servers.   The auditing tool we use to identify unique users does not work as it always re...
application delivery
dev
devops
iRules
johns's avatar
johns
Icon for Employee rankEmployee
Apr 24, 2012
If it is HTTP or HTTPS app (and your offloading SSL on the BIG-IP), then you can use the HTTP profile to insert client IP and extract in on the server for logging it in usual location.

 

 

With Apache, this is pretty trivial as illustrated in article at the following link:

 

http://devcentral.f5.com/weblogs/macvittie/archive/2008/06/02/3323.aspx

 

With IIS, it requires a bit more work to accomplish:

 

http://devcentral.f5.com/weblogs/Joe/archive/2009/08/19/x_forwarded_for_log_filter_for_windows_servers.aspx