topic Re: dropped by fw_cluster_ttl_anti_spoofing Reason: ttl check drop in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/dropped-by-fw-cluster-ttl-anti-spoofing-Reason-ttl-check-drop/m-p/100317#M7825 <P>On your cluster object under Network Management...Advanced, uncheck "Enable Extended Cluster Anti-spoofing".&nbsp; See&nbsp;<A class="cp_link sc_ellipsis" href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk42652&amp;partition=Advanced&amp;product=ClusterXL," target="_blank">sk42652: Anti-Spoofing check between cluster members in NGX R60 and above</A>.</P> Wed, 28 Oct 2020 02:02:38 GMT Timothy_Hall 2020-10-28T02:02:38Z dropped by fw_cluster_ttl_anti_spoofing Reason: ttl check drop https://community.checkpoint.com/t5/Firewall-and-Security-Management/dropped-by-fw-cluster-ttl-anti-spoofing-Reason-ttl-check-drop/m-p/100251#M7821 <P>Hi Checkmates,</P><DIV class="mceNonEditable lia-copypaste-placeholder">&nbsp;</DIV><P>Address spoofing protection is in disabled state.&nbsp;</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="p3.JPG" style="width: 587px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/8640iCC1D12932E90ECDA/image-size/large?v=v2&amp;px=999" role="button" title="p3.JPG" alt="p3.JPG" /></span></P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="p1.JPG" style="width: 582px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/8638i6FBAC3828FFDC66E/image-size/large?v=v2&amp;px=999" role="button" title="p1.JPG" alt="p1.JPG" /></span></P><P>Although, we are getting drop logs for cluster.</P><P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="p2.JPG" style="width: 999px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/8639i9EBF35792C555219/image-size/large?v=v2&amp;px=999" role="button" title="p2.JPG" alt="p2.JPG" /></span></P><P>Anyone please help me in this.</P><P>Regards,</P><P>HiteshB</P><P>#antispoofing</P> Tue, 27 Oct 2020 13:10:03 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/dropped-by-fw-cluster-ttl-anti-spoofing-Reason-ttl-check-drop/m-p/100251#M7821 Hitesh1690 2020-10-27T13:10:03Z Re: dropped by fw_cluster_ttl_anti_spoofing Reason: ttl check drop https://community.checkpoint.com/t5/Firewall-and-Security-Management/dropped-by-fw-cluster-ttl-anti-spoofing-Reason-ttl-check-drop/m-p/100317#M7825 <P>On your cluster object under Network Management...Advanced, uncheck "Enable Extended Cluster Anti-spoofing".&nbsp; See&nbsp;<A class="cp_link sc_ellipsis" href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk42652&amp;partition=Advanced&amp;product=ClusterXL," target="_blank">sk42652: Anti-Spoofing check between cluster members in NGX R60 and above</A>.</P> Wed, 28 Oct 2020 02:02:38 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/dropped-by-fw-cluster-ttl-anti-spoofing-Reason-ttl-check-drop/m-p/100317#M7825 Timothy_Hall 2020-10-28T02:02:38Z