Utilize client ip address in T24

Hi everyone,

So this is a new challenge question.

We have loadbalancer in front of browserWeb of T24

And we are using x-forward-for but how can we ise this
To include the user login ip address as part of log activity 

2nd how can we or if we can utilize the below idea in the link to verify the source ip that the user will be coming from certain ip to qllow or deny?

www.scribd.com/document/842664544/How-to...ic-IP-addresses-Copy

Hi
I think that an idea to add network security check to application level isn't a good one.

Such things are to be done at the firewall.

 

The firewall will not inspect https traffic to verify the username and ip address. Such information can be available to the app level where the ssl will be terminated.

OK, what about opening the server port (443) only for valid  IP addresses?
 

The risk is the operator who is allowed access can know the service account password like the ones used for doing FT transactions, he will still can use the account and utilize the privileges assigned to the service accounts that he is not authorized to by default. Not to mention if it was a VPN meaning he might be allowed lower privileges compared to his normal account when in office.