Need CLient public IP

Naveen11 — Tue, 09 May 2023 06:21:33 GMT

Want to see real client Public IP at my backend servers. Allow gateways to add X-forwarded-for field

Please help me with this. How to achieve seeing Clients Real Public IP at my backend servers allowing gateways to pass Public IPs through.

~My Network Flow when client tries to open a URL over the internet (Accessing a web page): -

Client --> Internet --> AWS ALB --> Cloud Guard IaaS Cluster HA(A-P) R80.40 -->AWS ALB--> Web Apps (AWS App Services)/Servers

Re: Need CLient public IP

PhoneBoy — Tue, 09 May 2023 22:32:43 GMT

The ALBs must be configured to send an XFF header.
Likewise, XFF support must be enabled on the Security Gateway.
This requires the use of Identity Awareness and Application Control blades.
Support must be enabled in the Check Point Security Gateway object > 'Identity Awareness' pane > section 'Proxy Support for Application Control and URL Filtering Blades'.

topic Need CLient public IP in Cloud Firewall

Need CLient public IP

Re: Need CLient public IP