we have a setup, where all the traffic is mirrored to the Checkpoint 5800 (via SPAN port).
Management and mirrored traffic interfaces both have "Anti Spoofing: Disabled",
however, since CP receives mirror of all the traffic (including one from its management interface), logs are filled with
message_info:"Local interface address spoofing" messages
(the MAC address of the mirrored packet is that of the router, not CP device).
How can we disable check for "Local interface address spoofing"?