topic Extended cluster Anti-Spoofing vs "Normal" antispoofing config in Firewall and Security Management

Extended cluster Anti-Spoofing vs "Normal" antispoofing config

cem82 — Wed, 09 Nov 2022 19:51:44 GMT

I'm wondering what does this option do differently to configuring antispoofing like normal under each interface? All I've managed to find is how to enable it via network management > advanced > put a tick in but can't find anything that says what it does?

Re: Extended cluster Anti-Spoofing vs "Normal" antispoofing config

the_rock — Wed, 09 Nov 2022 20:07:59 GMT

Its an old article, but it would still apply. To put it in layman's terms, it essentially ensures that cluster member will accept packets from the other member and reject potentially spoofed packets thats not intended for it.

Andy

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk42652