Forum Discussion

Scott123456789's avatar
Scott123456789
Icon for Cirrus rankCirrus
Mar 23, 2017

X-Forwarded-For through proxy and F5

My organization recently got the ASM module when they purchased a pair of 5250Vs. I've never used ASM before and we don't have anyone in our organization that has either, so I'm learning on the fly. ...
ASM Advanced WAF
security
x-forwarded-for
Scott123456789's avatar
Scott123456789
Icon for Cirrus rankCirrus
Mar 27, 2017

Ok, so it appears that my Internet Explorer doesn't send an XFF header. I eventually correctly used ssldump and was able to see the traffic that was coming the F5. I didn't see a XFF header at all. From my understanding of XFF, the client system shouldn't generate the XFF header, right? The proxy should insert it with the client IP? If that's a correct understanding, I need to talk to the proxy owner again.

 

If the proxy wasn't decrypting traffic, it seems that would make it not possible to have my client IP in the XFF header, right?

 

Thanks again for your help.