Which two features can be used with an upstream and downstream Cisco WSA web proxy to have the upstream WSA identify users by their client IP address? (Choose two.)

The correct answer is A. X-Forwarded-For D. via. In a chained proxy deployment where a downstream WSA forwards traffic to an upstream WSA, the upstream WSA sees the downstream WSA's IP-not the original client IP-as the source of requests. Two mechanisms allow the upstream WSA to identify the true client IP: X-Forwarded-For…

Proxy Services

Question

Options

AX-Forwarded-For
Bhigh availability
Cweb cache
Dvia
EIP spoofing

How the community answered

(58 responses)

A
88% (51)
B
2% (1)
C
3% (2)
E
7% (4)

Explanation

In a chained proxy deployment where a downstream WSA forwards traffic to an upstream WSA, the upstream WSA sees the downstream WSA's IP-not the original client IP-as the source of requests. Two mechanisms allow the upstream WSA to identify the true client IP: X-Forwarded-For (A) is an HTTP header that the downstream WSA appends to forwarded requests, containing the original client's IP address, which the upstream WSA can read and use for identification profiles. The Via header (D) is a standard HTTP header that records proxy chain information; the upstream WSA can parse this header to extract client identity details passed along the chain. High availability (B), web cache (C), and IP spoofing (E) are not mechanisms designed to pass client identity between proxy tiers.

Topics

#Proxy Chaining#Client IP Identification#HTTP Headers#Cisco WSA

Community Discussion

No community discussion yet for this question.

Full 300-725 Practice