Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
cc50339b-5d4d-3
Explorer

Geo Policy

With Geo Policy enabled, can a person spoof an ip address from a permitted country i.e United States and be allowed to pass through the firewall.  Is there a way of preventing such actions?

0 Kudos
1 Reply
PhoneBoy
Admin
Admin

One of the ways spoofing is done is using IP Options.
Check Point generally blocks these packets by default.
There are also anti-spoofing settings on the gateway to ensure the right IPs come from the right interface.
If someone is able to spoof an IP address and complete a three way TCP handshake from the wrong location despite this, there are far bigger issues to worry about.

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events