Can Palo use Akamai custom header (X-True-Source-IP)

[chhowell]

Can we use the Akamai custom header (X-True-Source-IP) in lieu of an XFF header?

[aleksandar.astardzhiev]

Hi @chhowell 

I don't believe there is a way. PAN firewall doesn't allow you to define custom headers.

[nikoolayy1]

If it is to match it by the Firewall but otherwise as it was mentioned you can't. To match the header you will need to change the default akamai real-client-ip header to X-Forwarded-For as I have worked with Akamai and header name where the real ip address is placed can be changed.

See how to enable XFF matching:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000CleCCAS