Configure Web Security Manager to Not Change the X-Forwarded-For Header

By default, Alert Logic Web Security Manager will insert the IP address of the upstream proxy in the X-Forwarded-For (XFF) header. Some customers have applications that rely on a specific list of XFF headers and do not want Web Security Manager to change the XFF header. In this case, Web Security Manager can be configured to not change the XFF header.

Note: The following information applies only to customers with Alert Logic® Cloud Defender™ or Alert Logic Web Security Manager™ entitlements. 

Solution

1. In the top of the Alert Logic console, under the Configuration main menu tab, click WAF.
   
   
2. Click Websites in the left sidebar.
   
   
3. Find your desired website and click Manage Website.
   
   
4. Select Virtual host.
   
   
5. Enable the Use trusted proxy option.
   
   
6. Enter the IP address of the upstream proxy (or the subnet that the upstream proxy resides in).