05-26-2025 08:33 AM
Hi @Eccom-puji ,
As far as I know PAN does not support proxy protocol.
There are Feature Requests that you can add your vote to via your local SE: (NSFR-I-27584 - Enable Support for Proxy Support v1/v2).
Instead, Palo Alto Networks supports the X-Forwarded-For (XFF) header for identifying original client IPs in HTTP traffic. This is commonly used in proxy and load balancer scenarios where the client IP needs to be preserved. You'll need to configure your upstream device to insert the XFF header, and then set up the firewall to extract and use it for user identification or logging:
https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/policy/identify-users-connected-through-a...
Hope this helps,
-Kim.
