Activate antispoofing for routable IP addresses

In rare cases, you might need to disable or remove an allowed IP address for an NGFW Engine.

The antispoofing configuration shows the allowed addresses for each interface. There is rarely any need to change the automatically added entries. The preferred way of preventing routing for IP addresses is to make changes in the routing configuration.

Note: Disabling or removing elements in the antispoofing configuration prevents access. The IP addresses that a disabled or removed element represents are considered to be spoofed addresses.

  For more details about the product and how to configure features, click Help or press F1.

Steps

  1. Right-click an NGFW Engine, then select Edit <element type>.
  2. Browse to Routing > Antispoofing.
  3. Right-click the element, then select Remove or Disable.
    If you disabled an element, you can re-enable the element in the same way.
  4. Click Save and Refresh to transfer the configuration.

Engine Editor – Routing – Antispoofing

Use this branch to view and change the engine's antispoofing configuration.

Option Definition
Refresh View Updates the view.
Expand All Expands all levels of the routing tree.
Collapse All Collapses all levels of the routing tree.