NSE5-FWB-AD-8-0: Fortinet NSE 5 - FortiWeb 8.0 Administrator

By Fortinet · Question Mode

QuestionQ16

VerifiedWeb application and API security with botnet mitigation

FortiWeb is blocking groups of users located behind your load balancer. The logs show the same source IP address for all users.

What action should you take to restore correct client identification?

Explanation

When a load balancer applies source NAT, FortiWeb sees the load balancer’s IP address for all requests. Inserting the original client IP in an HTTP header, such as X-Forwarded-For, enables FortiWeb to derive and use the actual client IP for logging and IP-based blocking. The load balancer should be configured as a trusted source for that header.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!