Hello, good morning,
Due to security measures, I'm trying to restrict access to the Oracle APEX Developer/Admin page.
The application is published behind two reverse proxies, with NGINX as the final proxy before reaching APEX.
My goal is to allow access to the admin page only from authorized internal IPs and deny access from all others, as part of our security measures.
Is it possible to achieve this while being behind two reverse proxies?
Not sure if it can properly handle the **X-Forwarded-For**
headers.
Thank you very much for any input .