cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2960
Views
0
Helpful
5
Replies

Actual Host IP in FMC connection event

  • Hello,

 

my lan range is 192.168.1.0/24 and I have a kerio operating as a web proxy which eventually connects to FTD. As it is appear on the photo, when I see the connection events logs, it shows the 10.10.10.22 ip  not the actual LAN ip. What should be done in order to see the actual lan ip instead of kerio’s outside interface ip?

thank you.

5 Replies 5

Go to FMC connection events > Table View of Connection Events, and click any of the black x to add a new column, scroll down till you find Original Client IP.

I did what you said but again it shows 10.10.10.22 ip address and not the actual host address.

Looks like your proxy is not configured to send the original client information inside the packets passing through the FTD. I would check if that would be supported on your proxy.

balaji.bandi
Hall of Fame
Hall of Fame

what you see as outside IP of the proxy is correct, since you proxying the Internal IP address with proxy IP, that is feature of Proxy.

 

Are you looking proxy send internal IP address to FTD ? you may need to look for HTTP_X_FORWARDED_FOR

 

BB

***** Rate All Helpful Responses *****

How to Ask The Cisco Community for Help

How can I do that in FMC?

Review Cisco Networking for a $25 gift card