Re: Geo Policy

May the 4th (+4)
Roadmap Session and Use Cases for
Cloud Security, SASE, and Email Security

SASE Masters:
Deploying Harmony SASE for a 6,000-Strong Workforce
in a Single Weekend

Paradigm Shifts: Adventures Unleashed!
Capture Your Adventure for a Chance to WIN!

Join the Photo Contest!

Mastering Compliance
Unveiling the power of Compliance Blade

WATCH NOW

CPX 2024 Content
is Here!

Get What You Need

Harmony SaaS
The most advanced prevention
for SaaS-based threats

LEARN MORE

CheckMates Go:
CPX 2024 Recap

LISTEN NOW

Create a Post

With Geo Policy enabled, can a person spoof an ip address from a permitted country i.e United States and be allowed to pass through the firewall. Is there a way of preventing such actions?

1 Reply

One of the ways spoofing is done is using IP Options.
Check Point generally blocks these packets by default.
There are also anti-spoofing settings on the gateway to ensure the right IPs come from the right interface.
If someone is able to spoof an IP address and complete a three way TCP handshake from the wrong location despite this, there are far bigger issues to worry about.