IP address shown in access log

Solutions ID:    KB3331
Version:    2.0
Status:    Published
Published date:    08/27/2009
Updated:    09/10/2009

Problem Description

  • IP address show in access log
  • "c-ip" and “s-ip” fields in the access log displays ""

Example of access Log:-
#Fields: date time time-taken c-ip cs-username cs-auth-group x-exception-id sc-filter-result cs-categories cs(Referer) sc-status s-action cs-method rs(Content-Type) cs-uri-scheme cs-host cs-uri-port cs-uri-path cs-uri-query cs-uri-extension cs(User-Agent) s-ip sc-bytes cs-bytes x-virus-id
#Remark: 5106084112 "Sample" "x.x.x.x" "Testing"

2009-07-30 18:34:25 1 - - gateway_error PROXIED "Media Sharing" -  504 TCP_ERR_MISS GET - http website 80 /path/ - js "Mozilla/4.0 (compatible;)" 892 236 -
2009-07-30 18:35:42 1 - - gateway_error PROXIED "Software/Hardware" -  504 TCP_ERR_MISS GET -
website 80 /path/ - js "Mozilla/4.0 (compatible;)" 892 248 -
2009-07-30 18:35:42 1 - - gateway_error PROXIED "Software/Hardware" -  504 TCP_ERR_MISS GET -
website  80 /path/ - css "Mozilla/4.0 (compatible;)" 892 232 –




If you have reflect ip enabled, this IP address entry in the access log can indicate that an upstream firewall only allows traffic from these address. These entries show the ProxySG making the request directly (which is what it is meant to-do) and the firewall upstream blocking the request (gateway_error).


To correct this issue, go to Management Console -> Proxy Settings -> HTTP Proxy  and uncheck the following pipeline options in the Acceleration Profile.

-    Pipeline embedded objects in client request

-    Pipeline redirects for client request

-    Pipeline embedded objects in prefetch request

-    Pipeline redirects for prefetch request


Rate this Page

Please take a moment to complete this form to help us better serve you.

Did this document help answer your question?
If you are finished providing feedback, please click the RATE CONTENT button. Otherwise, please add more detail in the following text box and then click RATE CONTENT.

Your response will be used to improve our document content.

Ask a Question