Showing posts with label NAT. Show all posts
Showing posts with label NAT. Show all posts

Thursday, September 6, 2012

Client location not captured in RUEI


Client address is important for RUEI to generate proper location based reports. Some networks might have Network address translations(NAT and Secure NAT) . In such cases it is better to have TAP or a copy port before a system where Network address translation takes place.
If you cannot have a have one before NAT. Make sure that the device that translates preserves the Original client IP in HTTP header.
For e.g. if you use BIG IP F5. You can enable F5 to insert original client IP Address in X-Forwarded-For Http Header. refer the below link to enable X-Forwarded-For in F5
Different vendors use different names to send original client IP after translation.

You can setup RUEI to get this information from the HTTP header.
Go to Configuration tab –> applications and click on the application
click on advanced tab –> check IP tab –> Specify HTTP Headers
image

In the HTTP header, add the header name and click add. you can add multiple header names. Click Save.
image

RUEI will now try to get the Client IP from this header first.