About Spoofing Attacks

One method that attackers use to enter your network is to make an electronic false identity. This is an IP spoofing method that attackers use to send a TCP/IP packet with a different IP address than the computer that first sent it.

When anti-spoofing is enabled, the Firebox verifies the source IP address of a packet is from a network on the specified interface.

The default configuration of the Firebox is to drop spoofing attacks.

To protect against spoofing attacks, from Fireware Web UI:

Select Firewall > Default Packet Handling.
The Default Packet Handling page appears.

Screen shot of the Default Packet Handling page

Select or clear the Drop Spoofing Attacks check box.
Click Save.

To protect against source route attacks, from Policy Manager:

Click .
Or, select Setup > Default Threat Protection > Default Packet Handling.
The Default Packet Handling dialog box appears.

Screen shot of the Default Packet Handling dialog box

Select or clear the Drop Spoofing Attacks check box.
Click OK.

About Spoofing Attacks

See Also