Risk engine

Hi

I’m trying to utilize the risk engine and have run into trouble.

 

I need to configure NAT and assume that it should be done the same way as in the Access Manager where we use the X-Forwarded-For header and parse it using this regex  [^, ]*  to remove all comma’s from the list of IP's(I’m not sure if and why this is needed as it was configured before I came along). Using the same expression in Advanced Authentication fails.

Perhaps some one could lead me in the direction of a description of the regex syntax used by AA as it obviously is not the same as AM.