topic Re: CloudGuard IaaS policy installation warning in Cloud Firewall

CloudGuard IaaS policy installation warning

benko2 — Fri, 16 Apr 2021 08:03:45 GMT

Hi,

we have CloudGuard IaaS cluster (R80.40) running in Azure. Anti-Spoofing is turned off on it as specified in CloudGuard Network High Availability for Azure R80.10 and Higher Deployment Guide.

When I install policy on it, a warning regarding the Anti-Spoofing appears:

It is very annoying because every time I install the policy, I check what's wrong with it.

Is it possible to do something in order to make this warning disappear? Or do I have CloudGuard configured the wrong way?

Re: CloudGuard IaaS policy installation warning

PhoneBoy — Fri, 16 Apr 2021 16:26:45 GMT

The way to make the message disappear is to configure anti-spoofing on the aforementioned interfaces.

Re: CloudGuard IaaS policy installation warning

balmey — Wed, 25 Jan 2023 11:18:16 GMT

Since disable Anti-Spoofing is recommended in Cloudguard Azure Cluster Deployment R80.10 upwards is the intention for us just to ignore the warning message??

I tried enabling this in detect only but it was not possible to enable in this cluster configuration - probably hence the recommendation to disable.

Re: CloudGuard IaaS policy installation warning

TomerM — Wed, 25 Jan 2023 11:55:14 GMT

Anti-Spoofing for CloudGuard deployments is not necessary since the cloud vendor performs this check.

You can ignore this message as long as you are working with CG.

I'm not familiar with a way to disable the warning itself.

Re: CloudGuard IaaS policy installation warning

Tal_Paz-Fridman — Wed, 25 Jan 2023 12:33:13 GMT

In order to make the warning disappear just make sure (as the message suggests) to have Anti-Spoofing enabled on External and Internal interfaces (in your case in Detect).

Re: CloudGuard IaaS policy installation warning

balmey — Mon, 23 Oct 2023 16:29:02 GMT

Anti Spoofing (detect) will not work as there's only one real interface configured (and one as sync) in CG configuration. Verification Error: There is only one interface defined for object XXXXXXXXX At Least one more interface must be configured for this object in order to use anti-spoofing feature.

Re: CloudGuard IaaS policy installation warning

TomerM — Sun, 29 Oct 2023 09:22:34 GMT

Hello balmey,

Please ignore Tal's reply.

Per my reply from 2023-01-25, there is no way of disabling the alert for Anti-Spoofing at the moment.
I'll pass your note to the relevant team to see if we can RFE this.

Thx,