Forum Discussion
Rajeesh_Raj_377
Nimbostratus
NimbostratusUnique source IPs visible
We are Seeing traffic from F5 interface IP in many of WAF logs, Is it due some Source-Nating done in F5 LB ?
Issue we face with Source-IP Nat is that, as packet get eg:F5 int IP 172.25.55.70, we are missing visibility of original Source IP of attacker.
2 Replies
g-ram_31429Cirrus
Try inserting the x-forwarded-for header on the virtual servers to forward the header to your downstream servers
https://support.f5.com/csp/article/K4816
g-ramTry inserting the x-forwarded-for header on the virtual servers to forward the header to your downstream servers
https://support.f5.com/csp/article/K4816
