The information you are about to copy is INTERNAL!
DO NOT share it with anyone outside Check Point.
The XFF header (X-Forward-For) is not added to web traffic when Security Gateway is in Transparent Mode
| Solution ID |
sk120360 |
| Product |
Security Gateway |
| Version |
R77.30 |
| OS |
Gaia |
| Date Created |
2017-10-09 07:29:15.0
|
| Last Modified |
2017-12-26 22:22:31.0
|
Symptoms
- HTTP/HTTPS transparent proxy is enabled on the Security gateway with the XFF header option enabled, but the next hop device cannot see the XFF header attached.
- Debugs on the gateway (
fw ctl debug -m fw conn drop packet packval and fw ctl debug -m WS + all) shows:
[cpu_X];[fwY_Z];###:{module} fw_http_proxy_inspection: not internal interface X.X.X.X not match to proxy;
Cause
Incoming interface for web traffic is not defined as "internal", which makes the traffic uneligible for the XFF header.
Solution
|
Note: To view this solution you need to
Sign In
.
|
