cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Announcements

Who rated this post

L0 Member

I have the same result.

 

If you enable "Use X-Forwarded-For Header in User-ID", you can see the real XFF IP under the source user column of the logs.  Palo Alto should have showed the real XFF IP in the XFF field and silently stripped it on the way out. 

Who rated this post