Forum Discussion
Morten_Marstran
Nimbostratus
Do you have control of all these devices? If so, is there any reason why you cannot remove the functionality that is inserting an XFF header on the WAF?
That way, you would only have the original client ip in the XFF header.
dwillis619_3073
Jun 12, 2017Nimbostratus
The issue is with the WAF is it only has the ability to either have XFF enabled which it adds the 2nd IP or turned off and then it does not forward anything.