Can the ProxySG appliance enforce policy decisions based on the "X-Forwarded-For" header?