For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Duncan_Proffitt's avatar
Duncan_Proffitt
Icon for Altostratus rankAltostratus
Apr 26, 2018

XFF and the ASM module

WE are experiencing a situation where the F5 is denying traffic due to an XFF that it doesnt understand.   The F5 receives traffic from a certain server that has already added an XFF on to the IP ...
application delivery
ASM Advanced WAF
LTM
Smithy's avatar
Smithy
Icon for Cirrostratus rankCirrostratus
Apr 26, 2018

Hi Duncan,

 

The XFF should be added to the HTTP Request. Do you have an example HTTP Request being sent to ASM? You also need to enable "Trust XFF Header" on the ASM/Security policy.

 

Cheers,

 

Brett