EDR: Are Multiple Reverse Proxies Supported for an EDR Installation?
book
Article ID: 289767
calendar_today
Updated On:
Products
Carbon Black EDR (formerly Cb Response)
Issue/Introduction
Can multiple values for the ReverseProxyIP variable in the /etc/cb/cb.conf file be used?
Environment
- EDR Server: All Supported Versions
Resolution
- EDR checks if $remote_addr = $reverseproxyip to decide if we keep the client_cert_id that was passed from the proxy.
- The $remote_addr would always be a single IP, so the $reverseproxyip wouldn't match if there were more than one configured.
- For that reason having multiple ReverseProxyIP entries would not be supported.
Feedback
thumb_up
Yes
thumb_down
No