Can I make a security rule with XFF IP in source address?

[LeeKiCheon]

Hi Community,

I already set XFF configuration via guide documents.

So I can look at XFF IP in Traffic logs and URL Logs.

I would like to make a security rule to allow only  A.B.C.D XFF IP in source address.

Unfortunately, I don't know how to set it.

And there isn't any document detailed.

Can you help me to fix it?

Thanks in advance.

[kiwi]

Hi @LeeKiCheon ,

This should help you:

https://docs.paloaltonetworks.com/pan-os/10-1/pan-os-admin/policy/identify-users-connected-through-a...

Kind regards,

-Kim.