You want to enable the HTTP header, x-forwarded-for, for only specific users/IPs or specific websites.
The x-forwarded-for HTTP header can be added to all traffic that traverses a ProxySG appliance globally by running the following from the CLI:
ProxySG>enable Enable Password: ProxySG#config t Enter configuration commands, one per line. End with CTRL-Z. ProxySG#(config)http add-header x-forwarded-for ok ProxySG#(config)exit
However, sometimes you may just need the header enabled for specific sites or specific users.
You can add the x-forwarded-for HTTP header via policy by using the specific triggers (source, destination address, etc). The below example provides the steps to configure an action object via the Visual Policy Manager, (VPM):
In a Web Access Layer, create a new rule.
Set the source and/or destination for this new rule to specify the objects that you wish to trigger this rule.
Right-click the Action column in the new rule, click Set, New, Control Request Header.
In the header name field, type x-forwarded-for
Set the value to$(client.address).
Note: This will append an x-forwarded-for header containing the client's original IP address, but only to HTTP requests that match the source and/or destination of the rule you created.
Imported Document ID: 000025405
Subscribing will provide email updates when this Article is updated. Login is required.
Thanks for your feedback. Let us know if you have additional comments below. (requires login)
Subscribed to the Article.
Unable to subscribe
Thanks for your additional feedback !!!
Enterprise Support Virtual Agent
Rate Me :
Tell us more:
Welcome! My name is Sami, the Enterprise Support Virtual Agent answering technical support questions.