Web Agent Guides › Web Agent Configuration Guide › Configure Virtual Servers › Resolve Agent Identity by IP Address

Resolve Agent Identity by IP Address

On virtual web servers, when IP addresses and host names are used to resolve the Agent name, the Web Agent can potentially use an incorrect value for AgentName to evaluate the request. This situation would allow unauthenticated users to access protected resources.

You can force the Web Agent to resolve the Agent name based on the physical IP address of the virtual server, with the following parameter:

• UseServerRequestIp

  Instructs the Web Agent to resolve the AgentName according to the physical IP address of a virtual web server. Use this parameter to increase security if a web server uses IP addresses for virtual server mappings. If this parameter is set to no, the Web Agent resolves the AgentName according to the host name in the HTTP Host header of the client's request.

  For Domino servers, this parameter is supported only for Domino 6.x. If this parameter is enabled for an Agent on other Domino versions, the Web Agent uses the default Agent name.

  For IIS Web Agents configured for SSL communication and virtual hosts, you must set this parameter to yes. IIS does not allow virtual host mappings using host names with SSL enabled.

  Default: No

To resolve a Web Agent's identity using the IP Address, set the UseServerRequestIp parameter to yes.