whatsmyip not returning correct dedicated IP address

Products

• Cloud Secure Web Gateway - Cloud SWG

Issue/Introduction

Dedicated IP address enabled for https://whatsmyip.com and whatsmyipaddress.com, yet when I access the site the IP address reported is not my assigned dedicated IP address.

whatsmyipaddress.com returning my IP address as regular Cloud SWG datacenter IP address.

Environment

Dedicated IP address domain enabled.

Cloud SWG.

All access methods.

Cause

Application issue with whatismyip.com or whatismyipaddress.com where an application on this host runs javascript from other domains to gather the IP address. If these other domains are not part of the dedicated IP address setup, there is a risk that the IP address returned is invalid.

Resolution

If you need a simple backend domain to confirm IP addresses with dedicated IP feature, use ipchicken.com, ifconfig.io or ifconfig.me. Both of these will always report the correct dedicated IP.

Alternatively (see additional information below), use the Cloud SWG HTTP logs to confirm the egress IP for all requests.

Additional Information

The HTTP logs will always return dedicated IP address information for the domains accessed. In the case of whatismyip.com, the HTTP logs confirmed that dedicated IP addressing was used even though the IP address returned by the site did not report it correctly. The highlighted logs below indicate the dedicated IP (highlighted as y.y.y.y), as well as the domain, the dedicated application name (whatismyip.com) and the NAT gateway the request egressed from (natproxy1).

2023-03-02 14:46:23 "DP2-GGBLO99_proxysg1" 303677 #.#.#.# "[email protected]" "##############- - - OBSERVED "Technology/Internet" - 0 TUNNELED unknown - ssl whatismyip.com 443 / - - - 192.168.2.84 440685 19257 - - - - - - - - 0 "client" client_connector "WhatIsMyIP" "-" #.#.#.# "United States" - none - - TLSv1.3 TLS_AES_128_GCM_SHA256 128 whatismyip.com "Technology/Internet" TLSv1.3 TLS_AES_128_GCM_SHA256 128 - ICAP_NOT_SCANNED - - ICAP_NOT_SCANNED - - - - - - 0 #.#.#.# - - "Ireland" 5 5 wss-agent architecture=x86_64%20name=Windows%2010%20Pro%20version=10.0.19041 9.1.1.19060 192.168.178.117 ############# WORKSTATION_NAME PC - - - - - - - - 2001:0DB8:7dc4:8180:7b48:5ae1:107c:eed7 xxxxxxxxxxxxxxx  y.y.y.y 100.65.10.182 "None" "None" dedicated_IP_address_token_value "whatismyip.com" "natproxy1.np1-ggblonc1.prod.bluecoatcloud.com"