Forum Discussion

Scott123456789's avatar
Scott123456789
Icon for Cirrus rankCirrus
Mar 23, 2017

X-Forwarded-For through proxy and F5

My organization recently got the ASM module when they purchased a pair of 5250Vs. I've never used ASM before and we don't have anyone in our organization that has either, so I'm learning on the fly. ...
ASM Advanced WAF
security
x-forwarded-for
Lyonell_165736's avatar
Lyonell_165736
Icon for Nimbostratus rankNimbostratus
Mar 23, 2017

IIS doesn't handle the X-Forwarded-For header in the normal IIS logs. The most common solution I've seen is, implementing IIS Advanced Logging. Depending on the version of IIS you are running, this might be an extension you need to install on your IIS servers (through the web platform installer on 2008 and 2008 R2), or it may be available built-in (2012 R2 and 2016, not sure about 2012).

 

Here's an example of how to configure the logging once you have advanced logging available to you: https://www.iis.net/learn/get-started/whats-new-in-iis-85/enhanced-logging-for-iis85