Web Monitor shows multiple User Sessions for each user

Web Monitor shows multiple User Sessions for each user

Question:

Web Monitor is showing many sessions from the same users.  The Login Time for each session is different, but the Last Activity time is identical.


Solution:

This behavior can happen if the following are present:
  1. A load balancer is being used, and UW is seeing the same IP (that of the load balancer) for all users.
    This can be verified by using the Configure button at the bottom of Web Monitor to add a column for ipAddress.
  2. A webApp that has the Secure by IP option enabled on it's Options tab.

With both of these items present, all of the users are seen as coming from the same IP (the IP of the load balancer), and therefore all the active sessions stay current and do not expire if the user does not properly logout of UW.


Setting the load balancer to use the X-Forwarded-For header, will tell it to pass the user's real IP address on to the UW servers using that header.  UW will use the IP address listed in that header, when present.  Providing each user with a unique IP address.