topic Re: Disable Anti Spoofing in Firewall and Security Management

Disable Anti Spoofing

N_Shaik96190 — Sun, 29 Jan 2023 15:58:02 GMT

Hi Guys,

What is the cli command to disable anti spoofing on individual interfaces.

Thank you in advanced.. !!

Re: Disable Anti Spoofing

PhoneBoy — Mon, 30 Jan 2023 01:46:48 GMT

On a gateway there is only a global option to disable it (not per interface): https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk117618&partition=Advanced&product=Quantum
You can disable it from the management on an interface using set simple-gateway or set simple-cluster with the relevant options.
See: https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/set-simple-gateway~v1.9%20

Re: Disable Anti Spoofing

the_rock — Mon, 30 Jan 2023 02:27:04 GMT

You got the right answer from @PhoneBoy

Re: Disable Anti Spoofing

N_Shaik96190 — Mon, 06 Feb 2023 10:47:59 GMT

after the command (fw ctl set int fw_antispoofing_enabled 0) in Gateway I see the below out out (0) but in Smart console GUI still I see on few interfaces antispoofing enabled ( with Prevent and log) on SG

Do we need to override any configuration from smart console, please confirm?

[Expert@CP01-GW01:0]# fw ctl get int fw_antispoofing_enabled
fw_antispoofing_enabled = 0
[Expert@CP01-GW01:0]#

[Expert@CP01-GW01:0]# fwaccel off
SecureXL device disabled.

Re: Disable Anti Spoofing

PhoneBoy — Mon, 06 Feb 2023 16:06:54 GMT

This kernel variable overrides the Anti-Spoofing settings on the management.
Which means SmartConsole will still show Anti-Spoofing is enabled.