Based on the image below, which source IP address will be seen in the data filtering logs of the Cloud NGFW for AWS with the default rulestack settings?

Question

Exhibit

Options

• A10.1.1.3
• B20.10.10.16
• C20.10.10.15
• D10.1.1.2

• A
  25% (11)
• B
  5% (2)
• C
  61% (27)
• D
  9% (4)

Explanation

Based on the image and default rulestack settings of the Cloud NGFW for AWS, the source IP address seen in the data filtering logs will be 20.10.10.15, which is the IP address of the load Default Rulestack Behavior: By default, the rulestack settings do not inspect or preserve the original client IP (e.g., 10.1.1.2) in the "X-Forwarded-For" header. Instead, the load balancer's IP (20.10.10.15) is recorded as the source IP. Logging Mechanism: Unless explicitly configured to parse the "X-Forwarded-For" header, the firewall's logs will reflect the IP address of the device directly sending the traffic to the NGFW (the load balancer in this case).

No community discussion yet for this question.