Extended cluster Anti-Spoofing vs "Normal" antispoofing config

[cem82]

Hi

I'm wondering what does this option do differently to configuring antispoofing like normal under each interface?  All I've managed to find is how to enable it via network management > advanced > put a tick in but can't find anything that says what it does?

[the_rock]

Its an old article, but it would still apply. To put it in layman's terms, it essentially ensures that cluster member will accept packets from the other member and reject potentially spoofed packets thats not intended for it.

Andy

https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...