Disable Antispoofing on all interfaces

[Simon_Macpherso]

Hello,

As part of automated deployment of single Azure cloudguard gateway with Terraform, I'm trying to disable anti-spoofing on all interfaces. Deployed offer is R81.10. 

I'm using the following command to to disable anti-spoofing on the gateway. 

fw ctl set int fw_antispoofing_enabled 0 ; fw accel off; fwaccel on 

Post-deployment check with fw ctl get int fw_antispoofing_enabled shows Anti-spoofing is disabled i.e. fw_anti_spoofing_enabled = 0. 

Should the disabled status be reflected in Smart Console? If I run a get interfaces without topology after deployment, anti-spoofing does not show as disabled on each interface. 

Regards,

Simon 

[Chris_Atkinson]

Typically you would need to use SmartConsole or the relevant API to implement for it to reflect as disabled on the Management.

[Simon_Macpherso]

Hi @Chris_Atkinson thanks for your response.

There doesn't appear to be any API endpoints related to anti-spoofing management up to and including management API v1.8.

[Chris_Atkinson · Accepted solution]

Please see: set simple-gateway > interfaces > anti-spoof ...

[Simon_Macpherso]

Thank @Chris_Atkinson. Was not aware the parameter resided within the set simple-gateway endpoint. 

[Danny]

local fw ctl changes on your cloudguard instances do not show in central SmartConsole. If you want to centrally and permanently disable the anti-spoofing setting on all interfaces, click on each interface and disable the anti-spoofing manually.

[Simon_Macpherso]

Hi @Danny thanks for confirming.