topic Palo Alto keep client IP in General Topics

Palo Alto keep client IP

BigPalo — Mon, 25 Nov 2019 08:24:56 GMT

Hi,

Is possible to keep in Palo Alto the client IP although PA is doing a source NAT to reach internet?. A service in the cloud needs to know the client IP. Something like XFF.

Re: Palo Alto keep client IP

kiwi — Mon, 25 Nov 2019 10:00:06 GMT

Hi @BigPalo ,

No I don't believe so, unless you're using a proxy with XFF enabled + enable XFF on the firewall.

Cheers,

-Kiwi.