topic XFF IP does not show the source IPs on the monitor in General Topics

XFF IP does not show the source IPs on the monitor

Ana_Munoz — Tue, 08 Mar 2022 00:54:09 GMT

Hello Guys,

The X-Forwarded-For Headers option has already been enabled and it has been set to Enabled for security policy, but the information is not visible.

Something else has to be enabled in the device configuration or in the load balancer?

I followed this kb.

https://docs.paloaltonetworks.com/pan-os/10-0/pan-os-admin/policy/identify-users-connected-through-a-proxy-server/use-xff-values-for-ip-based-security-policy-and-logging.html

Does anyone know or have an idea?

Re: XFF IP does not show the source IPs on the monitor

SutareMayur — Tue, 08 Mar 2022 05:33:46 GMT

Hi @Ana_Munoz ,

Check if the traffic that you are looking at is coming on secured port e.g. 443. If it is then firewall will not be able to see the header information unless the traffic is decrypted on the palo alto.

Config ref article -

Hope it helps!