For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Duncan_Proffitt's avatar
Duncan_Proffitt
Icon for Altostratus rankAltostratus
Apr 26, 2018

XFF and the ASM module

WE are experiencing a situation where the F5 is denying traffic due to an XFF that it doesnt understand.   The F5 receives traffic from a certain server that has already added an XFF on to the IP ...
application delivery
ASM Advanced WAF
LTM
Smithy's avatar
Smithy
Icon for Cirrostratus rankCirrostratus
Apr 27, 2018

Hi Duncan,

 

Where is the XFF being inserted, before the BIG-IP or at the BIG-IP? Your original question had: "The F5 receives traffic from a certain server that has already added an XFF on to the IP packet." So I took that to be the XFF was being inserted before the BIG-IP, therefore ASM needs to be told to trust the XFF.

 

Probably a good idea to log a support case.

 

Cheers,

 

Brett