Trend Micro - Securing Your Journey to the Cloud Business
Support
Sign In with your
Trend Micro Account
Need Help?
Need More Help?

Create a technical support case if you need further support.

Configuring SafeSync for Enterprise (SSFE) to log the real client IP address when deployed behind a Network Load Balancer (NLB)

    • Updated:
    • 29 Apr 2014
    • Product/Version:
    • SafeSync for Enterprise 2.0
    • SafeSync for Enterprise 2.1
    • Platform:
    • Ubuntu 10.04 64-bit
    • Virtual Appliance 4.1
    • Virtual Appliance 5.1
Summary

This article shows you the procedure on how to configure SSFE to identify and log the actual client IP address.

Details
Public
When SSFE servers are deployed behind a NLB, SSFE sees all requests as coming from the NLB IP address. If the administrator queries End User Events from the admin web console, the IP Address column will show the NLB address instead of the actual IP address of the connecting client.
To record and accept the real source IP of SafeSync client, the administrator must do the following:
  1. Log in to the SSFE shell.
  2. Change to a root account using the command “sudo su -“.
    Note: There should be a space between su and -.
  3. Enter the root password.
    Note: If the password has not been changed after installation, the default password is “safesync”.
  4. Edit “/etc/perlbal/perlbal.common.conf ”  to “vim /etc/perlbal/perlbal.common.conf”.
  5. In the section CREATE SERVICE balancer, insert "SET always_trusted = true” then save the changes.
    Insert "SET always_trusted = true”
  6. Restart Perlbal80 and Perlbalmgmtui.
    1. Type the command “supervisorctl”.
    2. Type the command “restart perbal80 perbalmgmtui”.
Do these steps on both appliance1 and appliance2.
Premium
Internal
Rating:
Category:
Configure; Deploy
Solution Id:
1103142
Feedback
Did this article help you?

Thank you for your feedback!

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.

If you need additional help, you may try to contact the support team. Contact Support

To help us improve the quality of this article, please leave your email here so we can clarify further your feedback, if neccessary:
We will not send you spam or share your email address.

*This form is automated system. General questions, technical, sales, and product-related issues submitted through this form will not be answered.
Related Articles