topic Re: Can Palo use Akamai custom header (X-True-Source-IP) in Next-Generation Firewall Discussions

Can Palo use Akamai custom header (X-True-Source-IP)

chhowell — Sat, 25 Jun 2022 23:36:26 GMT

Can we use the Akamai custom header (X-True-Source-IP) in lieu of an XFF header?

Re: Can Palo use Akamai custom header (X-True-Source-IP)

aleksandar.astardzhiev — Thu, 07 Jul 2022 12:38:00 GMT

Hi @chhowell

I don't believe there is a way. PAN firewall doesn't allow you to define custom headers.

Re: Can Palo use Akamai custom header (X-True-Source-IP)

nikoolayy1 — Thu, 01 Sep 2022 14:52:33 GMT

If it is to match it by the Firewall but otherwise as it was mentioned you can't. To match the header you will need to change the default akamai real-client-ip header to X-Forwarded-For as I have worked with Akamai and header name where the real ip address is placed can be changed.

See how to enable XFF matching:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CleCCAS