Question About Anti-Spoofing Configuration

[RemoteUser]

Hi Mates,

Is it possible to lose connectivity to a firewall if, for any reason, the Anti-Spoofing configuration on an interface is configured incorrectly?

Thanks in advance.

[Tal_Paz-Fridman]

It can cause the Security Gateway to drop connections from the Management so Install Policy can fail:

https://support.checkpoint.com/results/sk/sk117618

[Lesley]

Yes you can break a lot with incorrect configuration. Like Tal states you break policy push, but also access to the box itself via ssh / https. Also firewall logs can break, just all the connection from and towards the unit you can break. 

Consider to put the mgmt ip you connect from in the last option, do not check packets from