The new docs.trellix.com features a modernized UI and AI-powered conversational search. Content is currently available in English, with additional languages launching in early November 2026. We hope you enjoy the updated experience.

Configuration of Sensors to protect web servers with an Elastic Load Balancer (ELB)

Prev Next
Web servers are launched behind Elastic Load Balancers in AWS. In such a case, the true client IP of the web server is not displayed when alerts are generated for an attack. To view the true client IP of the web server, you have to enable the XFF header feature in the Trellix IPS Manager. For more information on XFF header feature, see Trellix Intrusion Prevention System Product Guide.