Forum Discussion

wng_98840's avatar
wng_98840
Icon for Nimbostratus rankNimbostratus
Aug 22, 2012

Source IP address

I have an external F5 VS that goes between 2 MS UAG servers. Within the UAG logs the source IP is the IP of the F5. Is there a way for the UAGs to log the source IP (true client IP)? I tried the x_forwarded stuff from the link below and it still did not work.

 

 

https://devcentral.f5.com/weblogs/Joe/archive/2009/08/19/x_forwarded_for_log_filter_for_windows_servers.aspx

 

 

Thanks,

 

 

Bill
microsoft
partner
  • Ryan_Korock_46's avatar
    Ryan_Korock_46
    Historic F5 Account
    Aug 22, 2012
    Bill... the x_forward header works best with IIS, and although you may get it to work with SSTP, I doubt you'll be able to get it to work with the other Access & VPN protocols within Direct Access or UAG.

     

     

    Your best bet is to deploy the BIG-IP without using SNAT to obscure the true client source IP.