Preventing a Spoof of an X-Forwarded-For Request
You can associate a BIG-IP local traffic policy to prevent a spoof of an x-forwarded-for request, where bad actors might attempt to thwart security by falsifying the IP address in a header, and pass it through the BIG-IP system.
NOTE: This video uses BIG-IP version 12.0.0