Page Comparison

...

When traffic is coming to the LAC filter from a load balancer (NetScaler, F5 BIG-IP etc), the LB is changing load balancer changes the HTTP source header to the LB load balancer's IP address.

Thus, traffic coming from the LB to the LAC filter have the IP address of the LB, causing This causes IP filtering to be not effectiveineffective.

Solution:

Add a X-Forwarded-For header in IP filtering. This IP HTTP header identifies the originating IP address.

This can be done in the Access Admin Portal in the following path:

Settings > IP filtering > Set ‘IP source' to ‘Header’, and enter x-forwaredforwarded-for in the IP HTTP Header field.

...

Save changes and restart the Bastion.