Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
asan
New Contributor

FortiADC behind FortiGate

 

Dear Friends,

 

I would like to know as per the below diagram.

It is possible to do as per the below diagram.

We have the public on FortiGate, the FortiGate configures DNAT public IP to VIP.

Is it possible to see the client IP address on the WEB server?

What should I do to see the client IP on the WEB server?

Thank you.

 

 

FGT-To-FAD.png

1 REPLY 1
AEK
SuperUser
SuperUser

Hello

You need to enable "X-Forwarded-For" parameter on your FortiADC, this inserts the real IP address of the client in the X-Header HTML header, so your web server can see the real client IP.

https://community.fortinet.com/t5/FortiADC/Technical-Tip-How-to-enable-an-X-Forwarded-For-header-in-...

AEK
AEK
Labels
Top Kudoed Authors