Disable Anti Spoofing

[N_Shaik96190]

Hi Guys,

What is the cli command to disable anti spoofing on individual interfaces.

Thank you in advanced.. !!

[PhoneBoy · Accepted solution]

On a gateway there is only a global option to disable it (not per interface): https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...
You can disable it from the management on an interface using set simple-gateway or set simple-cluster with the relevant options.
See: https://sc1.checkpoint.com/documents/latest/APIs/index.html#cli/set-simple-gateway~v1.9%20

[N_Shaik96190]

after the command (fw ctl set int fw_antispoofing_enabled 0) in Gateway I see the below out out (0) but in Smart console GUI still I see on few interfaces antispoofing enabled ( with Prevent and log) on SG

Do we need to override any configuration from smart console, please confirm?

[Expert@CP01-GW01:0]# fw ctl get int fw_antispoofing_enabled
fw_antispoofing_enabled = 0
[Expert@CP01-GW01:0]# 

[Expert@CP01-GW01:0]# fwaccel off
SecureXL device disabled.

[PhoneBoy]

This kernel variable overrides the Anti-Spoofing settings on the management.
Which means SmartConsole will still show Anti-Spoofing is enabled.

[the_rock]

You got the right answer from @PhoneBoy