topic Need to understand whether route based antispoofing can be configured on any interface. in General Topics

Need to understand whether route based antispoofing can be configured on any interface.

Prime — Wed, 11 Jan 2023 09:02:19 GMT

We have already configured the antispoofing on inside interface in detect mode. Need to understand whether route based antispoofing can be configured on any interface.

Re: Need to understand whether route based antispoofing can be configured on any interface.

Chris_Atkinson — Wed, 11 Jan 2023 16:26:54 GMT

Topology option: "network defined by routes" ?

What is the scenario or interface type that you are asking about and for which model appliance / version?

More information will help in providing an answer ...

Re: Need to understand whether route based antispoofing can be configured on any interface.

Blason_R — Wed, 11 Jan 2023 15:31:54 GMT

Are you talking about route based VPN? Nope anti spoofing can not be configured on those interfaces.

Re: Need to understand whether route based antispoofing can be configured on any interface.

the_rock — Wed, 11 Jan 2023 16:16:06 GMT

As the guys said, we need little more info. @Blason_R is right, anti spoofing would be disabled by default on VPNT interfaces. Are you possible referring to below? Mine is greyed out as I gave external interface example, but when thats checked, topology is automatically calculated, so even if it changes, no need ti push the policy. You need to have proper routing, of course...sort of goes without saying : - )