Forum Discussion

SomeGuy_75758's avatar
SomeGuy_75758
Icon for Nimbostratus rankNimbostratus
Dec 11, 2009

X-Forwarded-For with FirePass

Is there some way to enable XFF headers using FirePass? If not, can this be accomplished using a SED script or some other method?

 

 

My goal is to have the client ip to show up in our IIS logs instead of the FirePass's internal ip. I have found the ISAPI filter for IIS already.

 

 

Any suggestions would be greatly appreciated.
BIG-IP Access Policy Manager (APM)
remote access
security
  • Mike_61719's avatar
    Mike_61719
    Icon for Cirrus rankCirrus
    Dec 29, 2009
    I believe you can do this with Big-IP (i-rule), never seen this done on the Firepass.
  • Gym's avatar
    Gym
    Icon for Cirrus rankCirrus
    Jan 06, 2010
    Can't help on the XFF bit, but maybe there is another way to pass the IP to the server... The client IP is recorded in a session variable on the Firepass. Maybe you could incorporate that variable in the Firepass favourite (maybe tag it on at the end with &IP=%session.network.client.ip%), and have IIS extract it. But it would only work for the initial connection, not every HTTP transaction.