Fortinet black logo

Administration Guide

Logging client IP for forward traffic and HTTP transaction

Logging client IP for forward traffic and HTTP transaction

The HTTP transaction and Forward session logs include the ClientIP column that records the client IP address based on the learn-client-ip configuration. By default, the original-source-ip is recorded.

config web-proxy global
    set learn-client-ip {enable | disable}
    set learn-client-ip-from-header {true-client-ip x-real-ip x-forwarded-for}
    set learn-client-ip-srcaddr <address>
    set learn-client-ip-srcaddr6 <address>
end

learn-client-ip {enable | disable}

Enable/disable learning the client's IP address from headers (default = disable).

learn-client-ip-from-header {true-client-ip | x-real-ip | x-forwarded-for}

Learn client IP address from the specified headers: True-Client-IP, X-Real-IP, and X-Forwarded-For.

learn-client-ip-srcaddr(6) <address>

Source address name (srcaddr or srcaddr6 must be set).

Logging client IP for forward traffic and HTTP transaction

The HTTP transaction and Forward session logs include the ClientIP column that records the client IP address based on the learn-client-ip configuration. By default, the original-source-ip is recorded.

config web-proxy global
    set learn-client-ip {enable | disable}
    set learn-client-ip-from-header {true-client-ip x-real-ip x-forwarded-for}
    set learn-client-ip-srcaddr <address>
    set learn-client-ip-srcaddr6 <address>
end

learn-client-ip {enable | disable}

Enable/disable learning the client's IP address from headers (default = disable).

learn-client-ip-from-header {true-client-ip | x-real-ip | x-forwarded-for}

Learn client IP address from the specified headers: True-Client-IP, X-Real-IP, and X-Forwarded-For.

learn-client-ip-srcaddr(6) <address>

Source address name (srcaddr or srcaddr6 must be set).