Thread Info
  • State Verified Answer
  • +1 person also asked this people also asked this
  • Locked Locked
  • Replies 2 replies
  • Subscribers 6 subscribers
  • Views 2648 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

What content is passed in http headers?

Chris McGovern

Hi,
A customer I'm working for has Sophos UTM and they've set up a reverse proxy with a form login to a back end web server.
Can anyone point me to some documentation or tell me what is passed in http headers?

Is it just the URL of the back end web server? Or is the user name included?

I hope I got this in the right channel :)


Thanks!
Chris



This thread was automatically locked due to age.
Parents
  • 0

    Unrelated to authentication, but you may want to be aware of the header X-Forwarded-For.   It identifies the IP address of the WAF client, so that the back-end webserver knows the origin.  In Microsoft IIS, you can add it to the web logs and you can use it for IP filtering in IIS.   Since UTM WAF can do IP filtering, IIS IP address filtering is not generally needed.

Reply
  • 0

    Unrelated to authentication, but you may want to be aware of the header X-Forwarded-For.   It identifies the IP address of the WAF client, so that the back-end webserver knows the origin.  In Microsoft IIS, you can add it to the web logs and you can use it for IP filtering in IIS.   Since UTM WAF can do IP filtering, IIS IP address filtering is not generally needed.

Children
No Data
Unfiltered HTML