CloudGuard IaaS policy installation warning

[benko2]

Hi,

we have CloudGuard IaaS cluster (R80.40) running in Azure. Anti-Spoofing is turned off on it as specified in CloudGuard Network High Availability for Azure R80.10 and Higher Deployment Guide.

When I install policy on it, a warning regarding the Anti-Spoofing appears:

It is very annoying because every time I install the policy, I check what's wrong with it.

Is it possible to do something in order to make this warning disappear? Or do I have CloudGuard configured the wrong way?

[PhoneBoy]

The way to make the message disappear is to configure anti-spoofing on the aforementioned interfaces.

[balmey]

Since disable Anti-Spoofing is recommended in Cloudguard Azure Cluster Deployment R80.10 upwards is the intention for us just to ignore the warning message??

I tried enabling this in detect only but it was not possible to enable in this cluster configuration - probably hence the recommendation to disable.

[TomerM]

Anti-Spoofing for CloudGuard deployments is not necessary since the cloud vendor performs this check.

You can ignore this message as long as you are working with CG.

I'm not familiar with a way to disable the warning itself.

[Tal_Paz-Fridman]

In order to make the warning disappear just make sure (as the message suggests) to have Anti-Spoofing enabled on External and Internal interfaces (in your case in Detect).

[balmey]

Anti Spoofing (detect) will not work as there's only one real interface configured (and one as sync) in CG configuration. Verification Error: There is only one interface defined for object XXXXXXXXX At Least one more interface must be configured for this object in order to use anti-spoofing feature.

[TomerM · Accepted solution]

Hello balmey,

Please ignore Tal's reply.

Per my reply from 2023-01-25, there is no way of disabling the alert for Anti-Spoofing at the moment.
I'll pass your note to the relevant team to see if we can RFE this.

Thx,