Examples of route selection and antispoofing definitions
There are several considerations to take into account when configuring routing and antispoofing.
The more specific destination is considered first in routing
Only the most specific destination is considered valid in antispoofing
If an interface receives a packet with a source address that is not a valid address for the networks connected to that interface, the packet is discarded. This is the case, for example, when an
external interface receives a packet with an internal source. The NGFW Engine selects the most specific antispoofing definition it finds
for each packet. The following antispoofing configuration is based on the previous routing example.
Both interfaces are valid because they are equally specific