True Client IP not captured for Web URL hosted via Akamai Proxy

Products

• SITEMINDER

Issue/Introduction

True client IPs are not captured after  migrating  URLs to Akamai Proxy and the IP shown in the logs is Akamai IP address instead.

From Akamai, below what is configured to pass the true client IP to backend (siteminder Web server agents) 

----------------

------------------

 

Environment

Release : 12.8.03

Component : SITEMINDER WAM UI

Resolution

 

To instruct Siteminder agent to collect the true client IP from Header passed by Akamai, CustomIpHeader needs to be set in the ACO and should be equal to the name of the header passed by Akamai which in this example : True-Client-IP.

If CustomIPheader is set and RequireClientIP is set to yes , if agent is not able to resolve the Client IP from the header, request will be rejected. Please links below for details

 

https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/siteminder/12-52-01/configuring/web-agent-configuration/web-application-protection/default-http-headers-used-by-the-product.html#concept.dita_e4e26e2dda85b1fcf9773e20bad1f2715a72bf51_ConfigureIPAddressValidation

https://techdocs.broadcom.com/us/en/symantec-security-software/identity-security/siteminder/12-52-01/configuring/web-agent-configuration/web-application-protection/default-http-headers-used-by-the-product.html#concept.dita_e4e26e2dda85b1fcf9773e20bad1f2715a72bf51_ConfigureIPAddressValidation