TOLOGIX - ISLG Maintenance

Project dealing with all ongoing maintenance of the current ISLG application (www.investorstatelawguide.com and dev.investorstatelawguide.com).

Zcaler affects on ISLG

Assigned to
Jitesh Dhuravala, DevIT Jitesh D. Ketan Sondarva, Technical Project Manager at DevIT Ketan S. Ryan Knuth, Customer Support Manager at Industrial Ryan K.
Notes
We received the following message from one of our clients:

--------------

Good afternoon, 
 
Please be aware that in the coming months, a program of works has been initiated to implement a localised internet breakout point for all DLA Piper sites. To secure this new architecture, DLA Piper will be using Zscaler to protect our Business when interacting with Internet based services.
 
In order to identify DLA Piper to Internet based service providers; the aim is to utilise X-Forwarded-For (XFF) headers to identify DLA Piper to Service providers when access online resources. 
 
As such, please can you confirm that you can support this approach in order for DLA Piper and advise if any interaction is required to the service your organisation provides for these changes to take effect.
 
Kind Regards

--------------

Could you please determine whether the use of X-Forwarded-For (XFF) headers will affect the client's users from accessing and using ISLG.

Thanks,

Morgan

Comments & Events

Morgan Maguire, CEO
Ryan Knuth, Customer Support Manager at Industrial Ryan , Jitesh Dhuravala, DevIT Jitesh and Ketan Sondarva, Technical Project Manager at DevIT Ketan ,
 
Could I get your feedback on the issue above. 

Thanks,

Morgan 
Ryan Knuth, Customer Support Manager at Industrial
Good afternoon Gentlemen,

My apologies for the delayed response. Unfortunately this is outside my expertise, but based on some research it helps to confirm the originating IP address. Jitesh Dhuravala, DevIT Jitesh and Ketan Sondarva, Technical Project Manager at DevIT Ketan do you have any experience with this? I'm unsure as to whether this would be added at the application level, or server level?

https://developer.mozilla.org/en-US/docs/Web/HTTP/Headers/X-Forwarded-For

Thanks!

Ryan
Morgan Maguire, CEO
Thanks Ryan Knuth, Customer Support Manager at Industrial Ryan .

Ketan Sondarva, Technical Project Manager at DevIT Ketan and Jitesh Dhuravala, DevIT Jitesh , let us know if there's anything we can do for the existing ISLG application (and the new ISLG and ILG applications) to accommodate this. We don't want this to interfere with users' ability to access the applications.

Morgan 
Morgan Maguire, CEO
Hi Ketan Sondarva, Technical Project Manager at DevIT Ketan and Jitesh Dhuravala, DevIT Jitesh ,

The client above has requested that we provide them with more information on the above. Could you please provide your assessment as soon as possible.

Thanks,

Morgan 
Jitesh Dhuravala, DevIT
Hi Morgan Maguire, CEO Morgan ,

Yes, X-Forwarded-For (XFF) headers used for identifying the originating IP address of a client connecting to a web server through an HTTP proxy. To see the original IP address of the client, the X-Forwarded-For request header is used and We have implemented this approach in ISLG Rebuild and ILG as current implemented technology structure of ISLG and ILG provide benefit to do this features. We are looking into ISLG old application and update you once done.


Thanks,
Jitesh
Morgan Maguire, CEO
Ok. Thanks Jitesh Dhuravala, DevIT Jitesh . Yes, please let me know how this will effect the old ISLG application as well. Also, could you explain more on a more practical level what affect of the XFF headers will have on the applications. Are you saying this has the potential to interfere with giving users IP authenticated access to the application?  I need to understand what potential affect (if any) this will have on the users' experience, or any other impacts (e.g., tracking usage on admin site).

Thanks,

Morgan
Morgan Maguire, CEO
Hi Jitesh Dhuravala, DevIT Jitesh ​,

I'm following up on my comment above.

Thanks,

Morgan
Jitesh Dhuravala, DevIT
Hi Morgan Maguire, CEO Morgan ,

It will not effect ISLG existing application as XFF headers will useful to getting original IP address of user if user going to access other network and server.
We will do XFF header implementation in old application and update you.

There is no impact to user but yes admin can take original IP address of user who accessing application whether user will use his or other network.


Thanks,
Jitesh
Morgan Maguire, CEO
Great. Thanks Jitesh Dhuravala, DevIT Jitesh . We'll follow-up with the client and let them know.

Morgan 
Morgan Maguire, CEO
Hi Jitesh Dhuravala, DevIT Jitesh

I've notified the client that we're making the necessary XFF header implementation to the current ISLG application. Please let me know when those updates and complete.

Thanks,

Morgan 
Morgan Maguire, CEO
Hi Jitesh Dhuravala, DevIT Jitesh ,

Could you please provide an update on implementing XFF headers into the current application.

Thanks,

Morgan 
Morgan Maguire, CEO
Morgan Maguire completed this to-do.