Manage IP-Spoofing on a CheckPoint1530 Appliance

[Oliver-BR]

Hi,

I have a Quantum Spark 1530 (inexperienced administrator) and need to enable anti-spoofing measures.

From the research I've done I don't think anti-spoofing features come out of the box. 

Would the following inbound pseudorule work?

Source	Destination	Application/Service	Action	Log
<internal IP range>	<internal IP range>	Any	Block	Yes

Thanks in advance

[PhoneBoy]

If your 1530 is managed with a traditional SMS, then you can control the anti-spoofing the same way as on other gateways (i.e. as part of the gateway object).
For locally managed, aside from a couple of kernel variables, there is no direct control over anti-spoofing that I'm aware of.
However, anti=spoofing should be configured automatically based on the configured routes and networking (something non SMB R80.20+ gateways also support).

[Chris_Atkinson · Accepted solution]

Yes it should be enabled by default.

[Oliver-BR]

Thanks, @Chris_Atkinson.

I can't check if this is configured until next week but I'll take a look then and accept it as the solution.

[Oliver-BR]

Thanks, @Chris_Atkinson.