Bug ID 628858: Correct IP address is not shown for the client IP in some FPS alerts

Last Modified: Apr 10, 2019

Bug Tracker

Affected Product:  See more info
BIG-IQ Fraud Protection Service (FPS)(all modules)

Known Affected Versions:
5.1.0

Fixed In:
5.2.0

Opened: Nov 16, 2016
Severity: 3-Major

Symptoms

If an alert is received from a client that is behind multiple intermediate proxies, the wrong client IP is extracted from the alert.

Impact

Client IP address field populated is actually an intermediate device, which is a wrong value.

Conditions

There has to be one or more intermediate proxies between client and server.

Workaround

None

Fix Information

The list of IP Addresses are now interpreted in the correct order. The client IP and proxy IP addresses are listed correctly in FPS alerts.

Behavior Change