Which built-in variable identifies the client source IP in policy expressions?

Which built-in variable identifies the client source IP in policy expressions?

• A. REQ.IP.SOURCEIP
• B. REQ.IP.DESTIP
• C. HTTP.REQ.IN.URI
• D. CLIENT.IP

Answer: (A)

The thing being tested is how policy expressions reference the origin of a request. To identify the client’s address, you use the variable that directly represents the source IP of the incoming request as seen by the appliance. That makes the built-in reference for the client source IP the one that uses REQ.IP.SOURCEIP. It explicitly denotes the source address of the request, which is what you want when you need to know where the traffic originated. The other options point to different aspects: the destination IP is where the request is headed, not where it came from; the HTTP URI is about the resource path requested, not a network address; and a generic CLIENT.IP variable, while related, does not provide the precise source-IP reference used in policy evaluation for the request.

The thing being tested is how policy expressions reference the origin of a request. To identify the client’s address, you use the variable that directly represents the source IP of the incoming request as seen by the appliance. That makes the built-in reference for the client source IP the one that uses REQ.IP.SOURCEIP. It explicitly denotes the source address of the request, which is what you want when you need to know where the traffic originated.

The other options point to different aspects: the destination IP is where the request is headed, not where it came from; the HTTP URI is about the resource path requested, not a network address; and a generic CLIENT.IP variable, while related, does not provide the precise source-IP reference used in policy evaluation for the request.