Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Naveen11
Explorer

Need CLient public IP

Want to see real client Public IP at my backend servers. Allow gateways to add X-forwarded-for field

Please help me with this. How to achieve seeing Clients Real Public IP at my backend servers allowing gateways to pass Public IPs through.

~My Network Flow when client tries to open a URL over the internet (Accessing a web page): -

Client --> Internet --> AWS ALB --> Cloud Guard IaaS Cluster HA(A-P) R80.40 -->AWS ALB--> Web Apps (AWS App Services)/Servers

 

0 Kudos
1 Reply
PhoneBoy
Admin
Admin

The ALBs must be configured to send an XFF header.
Likewise, XFF support must be enabled on the Security Gateway.
This requires the use of Identity Awareness and Application Control blades.
Support must be enabled in the Check Point Security Gateway object > 'Identity Awareness' pane > section 'Proxy Support for Application Control and URL Filtering Blades'.

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.