Enabling x-forwarded-for at Cisco WSA to identify Client IP address

[zohair.masood]

Hi All,

Please help me out to identify actual Client IP address through X-forwarded-for . Please tell me how do i enable it and what parameters i need to select, please do let me know.

enabling x-forwarded-for at Cisco WSA is enough or i have to enable something else with this.

Please also confirm that it works for http only or both http and https.

Please help me out.

Many thanks in advance.

[balaji.bandi]

Here is WSA config guide ( look at Configuring Web Proxy Settings).

https://www.cisco.com/c/en/us/td/docs/security/wsa/wsa11-0/user_guide/b_WSA_UserGuide/b_WSA_UserGuide_chapter_0100.html

[shgrover]

hello Zohair,

You can do this on the GUI, Security Services -> Web Proxy -> generate headers-> x-forwarded for

this should be set to  "send".

Regards

Shikha Grover

PS: Please don't forget to rate and select as validated answer if this answered your question