topic real client IP in VM series firewall in GCP cloud in VM-Series in the Public Cloud

real client IP in VM series firewall in GCP cloud

KunalChopra — Tue, 22 Dec 2020 13:01:37 GMT

Hi Members,

I have a setup in GCP cloud wherein I have to deploy set of vm series palo firewalls between load balancer and real servers.

The problem is I need to know the exact IP address of the client whereas if you see in firewall logs, you will get to see only the IP address subnet of external load balancer.

can anyone help me on this ??

thanks in advance @reaper

Re: real client IP in VM series firewall in GCP cloud

reaper — Tue, 22 Dec 2020 13:11:55 GMT

Is there a way for the loadbalancers to not perform NAT?

if there's a proxy component (rather than NAT) you could try adding x-forwarded-for headers

Re: real client IP in VM series firewall in GCP cloud

KunalChopra — Wed, 23 Dec 2020 11:26:40 GMT

No there is no option of removing NAT functionality from LB.

I think the only option left is to enable XFF under URL filtering .what say ?

Re: real client IP in VM series firewall in GCP cloud

timturner — Mon, 30 Aug 2021 12:21:21 GMT

Thanks for helping solve my problem. Finally, custom software development can be used to support a company's long-term viability.