Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Oliver-BR
Participant
Jump to solution

Manage IP-Spoofing on a CheckPoint1530 Appliance

Hi,

I have a Quantum Spark 1530 (inexperienced administrator) and need to enable anti-spoofing measures.

From the research I've done I don't think anti-spoofing features come out of the box. 

Would the following inbound pseudorule work?

SourceDestinationApplication/ServiceActionLog
<internal IP range><internal IP range>AnyBlockYes

 

Thanks in advance

0 Kudos
1 Solution

Accepted Solutions
Chris_Atkinson
Employee Employee
Employee

Yes it should be enabled by default.

 

spoof.png

CCSM R77/R80/ELITE

View solution in original post

(1)
4 Replies
PhoneBoy
Admin
Admin

If your 1530 is managed with a traditional SMS, then you can control the anti-spoofing the same way as on other gateways (i.e. as part of the gateway object).
For locally managed, aside from a couple of kernel variables, there is no direct control over anti-spoofing that I'm aware of.
However, anti=spoofing should be configured automatically based on the configured routes and networking (something non SMB R80.20+ gateways also support).

0 Kudos
Chris_Atkinson
Employee Employee
Employee

Yes it should be enabled by default.

 

spoof.png

CCSM R77/R80/ELITE
(1)
Oliver-BR
Participant

Thanks, @Chris_Atkinson.

I can't check if this is configured until next week but I'll take a look then and accept it as the solution.

0 Kudos
Oliver-BR
Participant

Thanks, @Chris_Atkinson.

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events