Technical Tip: How to send the original IP from a Proxy (with Proxy protocol) to the backend server that does not support Proxy protocol

1. Enable Proxy protocol on Server policy on FortiWeb:

Note:

'use-proxy-protocol-addr' should be kept enabled as per default settings:

config server-policy policy

    edit "Policy1"

        set use-proxy-protocol-addr enable

2. Configure X-Forwarded-Rule to send the original IP (that FortiWeb parsed from incoming Proxy Protocol) to the backend server that only supports X-Forwarded-For to extract the original IP: