Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

Add Proxy IP Addresses for SRX Series Devices to JATP

If there is a proxy server between the endpoint device and the SRX Series device, the session data sent from the SRX Series to JATP will have the proxy IP address as the endpoint IP address. Therefore JATP may incorrectly identify the proxy IP address as the endpoint address.

By adding the proxy IP addresses to the JATP UI and making JATP aware of them, the correct endpoint IP addresses can be obtained from the X-forwarded-for (XFF) header. JATP can then use the trusted proxy IP address to validate the proxy IP address from the X-forwarded-for field and replace the real endpoint IP address.

To add proxy IP addresses to JATP:

  1. Login to the JATP UI.
  2. Select Config > System Profiles > SRX Settings.
  3. Select the SRX Series device and click Edit as shown in Figure 1.
    Figure 1: Enrolled Devices PageEnrolled Devices Page

    The Update SRX Device Info page is displayed as shown in Figure 2.

  4. Add the proxy IP address or addresses and click Submit.
    Figure 2: Update SRX Device Info PageUpdate SRX Device Info Page

Related Documentation