X-Forward-For header in v18?

Hi liam burke,

Thank you for reaching out to the Community! 

Could you please provide some more information about your configuration? Are you trying to configure WAF? Check out the "Pass host header" option.

If yes, please check out the following document for more info: https://docs.sophos.com/nsg/sophos-firewall/18.0/Help/en-us/webhelp/onlinehelp/nsg/sfos/tasks/WAFRuleAdd.html?hl=x-forward

Thanks,

Hi

Thanks for the reply,

The scenario is this, my laptop recently got the ZScaler app installed, as a result all traffic is getting blocked as i have web filtering enabled internally.

The ZScaler team supporting the rollout say that if we enable XFF it will fix all their issues.

However i have created a specific rule, bypassing the proxy for my device specifically outbound on ports 443 and 80, but i am still not having any luck. So, in summary, it's XFF outbound which appears to be required.

With thanks.

So you want to deploy a VPN App internally and XG will block those HTTP Packets? As far as i know, the XFF header will not be touched in DPI. So if you move from the old proxy to the DPI Engine in V18, this should work.