Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
cc50339b-5d4d-3
Explorer

Geo Policy

With Geo Policy enabled, can a person spoof an ip address from a permitted country i.e United States and be allowed to pass through the firewall.  Is there a way of preventing such actions?

1 Reply
PhoneBoy
Admin
Admin

One of the ways spoofing is done is using IP Options.
Check Point generally blocks these packets by default.
There are also anti-spoofing settings on the gateway to ensure the right IPs come from the right interface.
If someone is able to spoof an IP address and complete a three way TCP handshake from the wrong location despite this, there are far bigger issues to worry about.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events