Firewall did not seeing source public IP. Log show F5 as source IP.

Question

Hi,I have a VIP that accesses able from outside. When the user connects to this VIP in the firewall log we see F5 source IP vs we should see public IP for that user. My VIP&nbsp;Source Address Translation is set to "Automap". If I change&nbsp;Source Address Translation to "NONE" I can see the user's public IP.&nbsp; It looks like that incoming traffic is using my VIP and since my DMZ server gateway is a point to FW the return traffic will use the default VIP that we have for all outbound internet traffic.&nbsp;I am wondering that do I have an Asymatic routing issue or not or is there any issue if I use&nbsp;Source Address Translation to "NONE".&nbsp;Below is my setup:Internet &lt;-------&gt; F5 &lt;----------&gt; FW &lt;--------------&gt; DMZ server&nbsp;&nbsp;

heath_parrott · Answer

If the firewall has a default gateway that is set to a floating IP/Virtual Server of the F5 pair then you should be able to disable SNAT (set to NONE). &nbsp;If the Firewall does not point to F5 systems for egress then SNAT Auotmap or the use of a SNAT pool will be required for the applicaiton to function properly.&nbsp;