For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

noplonik's avatar
noplonik
Icon for Nimbostratus rankNimbostratus
Mar 06, 2023

XFF AWAF

Hello, I need to disable the rule that checks xff and saves the original IP address that comes from the request on AWAF v16.  Do you have any idea how to do it? Best regards, N.
devops
event
security
Mohamed_Ahmed_Kansoh's avatar
Mohamed_Ahmed_Kansoh
Icon for MVP rankMVP
Mar 06, 2023

Hi noplonik , 
Check 3 scopes of Configuration used to add this feature : 
1) Check the attached { http } Profile and opent it from Profiles sections , and disable "XFF" Feature , you will see it easly in http profile settings , but make sure you are selecting the http profile which attached to the required virtual server { Which contains AWAF policy }. 

2) Check if you are attaching an iRule in this Virtual server {  Which contains AWAF policy } used to insert XFF header in HTTP requests, and see if you can delete it.

3) Check if you are attaching a LTM policy  in this Virtual server {  Which contains AWAF policy } used to insert XFF header in HTTP requests , and see if you can delete it.

 

Leslie_Hubertus's avatar
Leslie_Hubertus
Ret. Employee
Mar 08, 2023

Hi noplonik  - did the reply from Mohamed_Ahmed_Kansoh help you? If yes, could you please hit the Accept as Solution button? And if no, please let us know what happened so we can keep trying to help.