Forum Discussion
Kyle74
Altocumulus
AltocumulusX-Forwarded-For merged into c-ip in the Logs
This isn't a directly F5 question, but we do use an F5. Anyway, our security team wants us to merge the X-Forwarded-For IPs into the c-ip column. Does anyone know how to do this in IIS?
cjunior
Nacreous
NacreousHi,
The first one has content that shows what you need to do to send XFF header to the server.
The other two, may help you a way to read or replace XFF value on c-ip column.
Regards.
Kyle74Altocumulus
AltocumulusMy boss shot both ideas down.
Any idea if we can change the column location for the XFF? Maybe have it before or after the Client IP?
- cjunior
Hum, the ISAPI option was my choice on past.
Sorry, nothing more on mind at this time.
- cjunior
I think the best way is you confirm on your webserver log entries.
Capturing those headers on BIG-IP will just confirm that all was sent.
Regards.
- cjunior
If I not wrong, this module replaces the c-ip original value, so, you are able to discard the XFF value on backend. Please, double check it :)
Cheers
- Kyle74
Thank you cjunior, I'm going to try that out, just got the module installed on our 2016 server.
Question though, how would I test to see if this works on a dev server?
- Kyle74
Will do.
Cjunior, with this module installed, should I get rid of my Custom Log that has X-Forwarded-For set?