I have a IIS webserver setup behind a raptor 6.5 firewall. In the IIS logs, the only incoming IP address that shows up is the address of the firewall. Is there a way to change this? Cisco doesn't do that. I need to see the address of the requesting system. I tried disabling web proxy, but then it wouldn't serve the pages at all.
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations Westi on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
Raptor 6.5 with IIS server, wrong IP in logs 1
- Thread starter mufka
- Start date
-
1
- #2
Hey Mufka,
This is because the SEF is a application firewall.
When someone on the internet access your web server they first create a connection to the SEF and the SEF then creates another connection to your web server.
This process has greater security because the SEF is checking the data within the packets as well as source address and destination port, where some other firewalls only check to make sure that the source address and destination ports is allowed.
As for fixing your problem, you have to create a address transform which allows the original client to use its real source address. This is very easy to do, as per the link below.
How to set an internal Web server to see real addresses of external clients
This is because the SEF is a application firewall.
When someone on the internet access your web server they first create a connection to the SEF and the SEF then creates another connection to your web server.
This process has greater security because the SEF is checking the data within the packets as well as source address and destination port, where some other firewalls only check to make sure that the source address and destination ports is allowed.
As for fixing your problem, you have to create a address transform which allows the original client to use its real source address. This is very easy to do, as per the link below.
How to set an internal Web server to see real addresses of external clients
- Status
Similar threads
- Locked
- Question
- Locked
- Question