For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

Duncan_Proffitt's avatar
Duncan_Proffitt
Icon for Altostratus rankAltostratus
Apr 26, 2018

XFF and the ASM module

WE are experiencing a situation where the F5 is denying traffic due to an XFF that it doesnt understand.   The F5 receives traffic from a certain server that has already added an XFF on to the IP ...
application delivery
ASM Advanced WAF
LTM
boneyard's avatar
boneyard
Icon for MVP rankMVP
Apr 28, 2018

you say 

"Verisign server (takes Internet users IP add and adds first XFF)"
isnt that enough already? that one knows the client IP, the others only know the upstream server IPs?

two times on the BIG-IP is not needed, probably done by people who didn't understand the functions, but again it will take the used IP which might not be what you want.