Reflect_ip() policy is not working for ProxySG SSL based traffic.

Products

• ProxySG Software - SGOS

Issue/Introduction

SSL traffic is not reflecting the configured IP even though I am using policy like in the following example:

<Proxy>
    reflect_ip(192.168.0.123)

Resolution

Although the example policy in the <Proxy> layer will work for non-SSL traffic, SSL traffic is not affected by the <Proxy> layer.  To reflect IP for SSL traffic you will need to use a <Forward> layer.  Example:

<Forward>
    reflect_ip(192.168.0.123)