How do I Implement Effective Client IP so that the Client IP can be Reported in SIEM Devices?

search cancel

book

calendar_today

ProxySG Software - SGOS

How do I implement Effective Client IP so that client IP can be reported accurately in SIEM devices?

Go to the ProxySG Management Console > Configuration > Policy > VPM and click Launch.
Select the Policy menu and choose Add Web Access Layer.
Name the new layer Effective IP and click OK.
Select the Edit menu and choose Reorder Layers.
Move the Effective IP layer to the bottom of the list. This ensures that it is the final layer to be processed. Click OK.
Click Add Rule.
Set the fields in this rule as follows: Source: any, Destination: Any, Service: Any, Time: Any, Action: Set - New - Set Effective Client IP and select "Use the original client address as the effective IP address"
Click OK and Install policy.

With above policy in place, every request processed by proxy will report the effective client ip to upstream devices.

Note:

Global policy tracing (Policy > Policy Options > Default Policy Tracing) must be disabled for this to function as expected.
When not in use, Blue Coat recommends that the effective IP address layer is disabled.

thumb_up Yes

thumb_down No