How do I log actual client IP address in the IIS 5 and IIS 6 logs when using a Barracuda Web Application Firewall?

Solution #00004611

Scope:

Applies to all Barracuda Web Application Firewalls.

Answer:

To log the actual client IP instead of the VIP of the Barracuda Web Application Firewall in the IIS logs, install the x-forwarded-for DLL on the IIS server.  By default, the Web Application Firewall forwards the client IP address as the header X-Forwarded-For.

1. Extract the X-Forwarded-For.dll file into a folder on the Web Server.
2. Open Internet Services Manager and go to the Properties section of the Website.
3. In the ISAPI filter tab, add the X-Forwarded-For.dll file.
4. Restart the WWW service from Administrative Tools > Services.

Link to this page:

https://campus.barracuda.com/solution/50160000000IAhdAAG