Create a Post
Showing results for 
Search instead for 
Did you mean: 

Geo Policy

With Geo Policy enabled, can a person spoof an ip address from a permitted country i.e United States and be allowed to pass through the firewall.  Is there a way of preventing such actions?

0 Kudos
1 Reply

One of the ways spoofing is done is using IP Options.
Check Point generally blocks these packets by default.
There are also anti-spoofing settings on the gateway to ensure the right IPs come from the right interface.
If someone is able to spoof an IP address and complete a three way TCP handshake from the wrong location despite this, there are far bigger issues to worry about.

0 Kudos