In certain scenarios, such as child/parent proxies, the client IP is not visible on the parent proxy and any rule, such as bandwidth management or allow or deny rule based on client IP, could not be implemented by default.
To perform end client base policy on parent proxy, the child proxy must add the client-ip header when forwarding the request to parent.
Create a rule on the parent proxy to process the header sent by the child proxy:
On ProxySG CLI ProxySG#conf t Enter configuration commands, one per line. End with CTRL-Z. ProxySG#(config)http add-header client-ip
Sample Request sent by Child Proxy to Parent Proxy
GET http://www.google.com.sg/ HTTP/1.1
Host: www.google.com.sg
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US; rv:1.9.2.8) Gecko/20100722 Firefox/3.6.8 ( .NET CLR 3.5.30729)
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Client-IP: 10.105.13.202
Cache-Control: max-stale=0
Proxy-Connection: Keep-Alive
X-BlueCoat-Via: 868214B7E1720943