Forum Discussion

noplonik's avatar
noplonik
Icon for Nimbostratus rankNimbostratus
Mar 06, 2023

XFF AWAF

Hello,

I need to disable the rule that checks xff and saves the original IP address that comes from the request on AWAF v16.  Do you have any idea how to do it?

Best regards,

N.

  • Hi noplonik , 
    Check 3 scopes of Configuration used to add this feature : 
    1) Check the attached { http } Profile and opent it from Profiles sections , and disable "XFF" Feature , you will see it easly in http profile settings , but make sure you are selecting the http profile which attached to the required virtual server { Which contains AWAF policy }. 

    2) Check if you are attaching an iRule in this Virtual server {  Which contains AWAF policy } used to insert XFF header in HTTP requests, and see if you can delete it.

    3) Check if you are attaching a LTM policy  in this Virtual server {  Which contains AWAF policy } used to insert XFF header in HTTP requests , and see if you can delete it.

     

    • Leslie_Hubertus's avatar
      Leslie_Hubertus
      Ret. Employee

      Hi noplonik  - did the reply from Mohamed_Ahmed_Kansoh help you? If yes, could you please hit the Accept as Solution button? And if no, please let us know what happened so we can keep trying to help.