topic Re: Disable Antispoofing on all interfaces in Firewall and Security Management

Disable Antispoofing on all interfaces

Simon_Macpherso — Mon, 17 Oct 2022 02:18:38 GMT

Hello,

As part of automated deployment of single Azure cloudguard gateway with Terraform, I'm trying to disable anti-spoofing on all interfaces. Deployed offer is R81.10.

I'm using the following command to to disable anti-spoofing on the gateway.

fw ctl set int fw_antispoofing_enabled 0 ; fw accel off; fwaccel on

Post-deployment check with fw ctl get int fw_antispoofing_enabled shows Anti-spoofing is disabled i.e. fw_anti_spoofing_enabled = 0.

Should the disabled status be reflected in Smart Console? If I run a get interfaces without topology after deployment, anti-spoofing does not show as disabled on each interface.

Regards,

Simon

Re: Disable Antispoofing on all interfaces

Chris_Atkinson — Mon, 17 Oct 2022 05:07:19 GMT

Typically you would need to use SmartConsole or the relevant API to implement for it to reflect as disabled on the Management.

Re: Disable Antispoofing on all interfaces

Danny — Mon, 17 Oct 2022 05:10:49 GMT

local fw ctl changes on your cloudguard instances do not show in central SmartConsole. If you want to centrally and permanently disable the anti-spoofing setting on all interfaces, click on each interface and disable the anti-spoofing manually.

Re: Disable Antispoofing on all interfaces

Simon_Macpherso — Tue, 18 Oct 2022 01:53:31 GMT

Hi @Chris_Atkinson thanks for your response.

There doesn't appear to be any API endpoints related to anti-spoofing management up to and including management API v1.8.

Re: Disable Antispoofing on all interfaces

Simon_Macpherso — Tue, 18 Oct 2022 01:54:24 GMT

Hi @Danny thanks for confirming.

Re: Disable Antispoofing on all interfaces

Chris_Atkinson — Tue, 18 Oct 2022 03:15:42 GMT

Please see: set simple-gateway > interfaces > anti-spoof ...

Re: Disable Antispoofing on all interfaces

Simon_Macpherso — Wed, 19 Oct 2022 00:01:44 GMT

Thank @Chris_Atkinson. Was not aware the parameter resided within the set simple-gateway endpoint.