https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-packet-flow-along-with-Anti-spoofing-and-Geopolicy/m-p/107851#M14477 <P>Kindly share the&nbsp;Checkpoint packet flow along with Anti spoofing and Geopolicy mentioned.</P><P>The detailed flow diagrams available don't mention antispoofing in the packet flow.</P> Thu, 14 Jan 2021 16:23:04 GMT praveshnayal 2021-01-14T16:23:04Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-packet-flow-along-with-Anti-spoofing-and-Geopolicy/m-p/107851#M14477 <P>Kindly share the&nbsp;Checkpoint packet flow along with Anti spoofing and Geopolicy mentioned.</P><P>The detailed flow diagrams available don't mention antispoofing in the packet flow.</P> Thu, 14 Jan 2021 16:23:04 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-packet-flow-along-with-Anti-spoofing-and-Geopolicy/m-p/107851#M14477 praveshnayal 2021-01-14T16:23:04Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-packet-flow-along-with-Anti-spoofing-and-Geopolicy/m-p/107862#M14479 <P>There are several packet flow diagrams on CheckMates, one of which is:&nbsp;<A href="https://community.checkpoint.com/t5/General-Topics/Security-Gateway-Packet-Flow-and-Acceleration-with-Diagrams/td-p/40244" target="_blank">https://community.checkpoint.com/t5/General-Topics/Security-Gateway-Packet-Flow-and-Acceleration-with-Diagrams/td-p/40244</A>&nbsp;<BR />In general, anti-spoofing is done as one of the earliest checks (part of Stateless Checks).<BR />Legacy Geo Policy is done before the Access Policy, but you should be using Geo Objects in the Access Policy instead (if R80.20+).</P> Thu, 14 Jan 2021 20:10:30 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-packet-flow-along-with-Anti-spoofing-and-Geopolicy/m-p/107862#M14479 PhoneBoy 2021-01-14T20:10:30Z