https://live.paloaltonetworks.com/t5/general-topics/getting-parity-with-checkpoint-anti-spoofing-for-an-interface/m-p/147793#M49442 <P>You can enable antispoofing in zone protection. The routing table will be used to build table of allowed/disallowed subnets per interface</P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="zone protection anti spoofing.png"><img src="https://live.paloaltonetworks.com/skins/images/EAF30C9A5814E020FF754681AA726920/responsive_peak/images/image_not_found.png" alt="zone protection anti spoofing.png" /></span></P> Wed, 15 Mar 2017 09:12:51 GMT reaper 2017-03-15T09:12:51Z https://live.paloaltonetworks.com/t5/general-topics/getting-parity-with-checkpoint-anti-spoofing-for-an-interface/m-p/147781#M49438 <P><A href="https://sc1.checkpoint.com/documents/R77/CP_R77_Firewall_WebAdmin/92703.htm#o92878" target="_blank">https://sc1.checkpoint.com/documents/R77/CP_R77_Firewall_WebAdmin/92703.htm#o92878</A></P><P>Say I want to build parity configuration that Checkpoint offers here (above in the URL), but with PANOS.</P><P>How would I go about doing that ?</P> Wed, 15 Mar 2017 04:33:18 GMT https://live.paloaltonetworks.com/t5/general-topics/getting-parity-with-checkpoint-anti-spoofing-for-an-interface/m-p/147781#M49438 mpgioia 2017-03-15T04:33:18Z https://live.paloaltonetworks.com/t5/general-topics/getting-parity-with-checkpoint-anti-spoofing-for-an-interface/m-p/147793#M49442 <P>You can enable antispoofing in zone protection. The routing table will be used to build table of allowed/disallowed subnets per interface</P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="zone protection anti spoofing.png"><img src="https://live.paloaltonetworks.com/skins/images/EAF30C9A5814E020FF754681AA726920/responsive_peak/images/image_not_found.png" alt="zone protection anti spoofing.png" /></span></P> Wed, 15 Mar 2017 09:12:51 GMT https://live.paloaltonetworks.com/t5/general-topics/getting-parity-with-checkpoint-anti-spoofing-for-an-interface/m-p/147793#M49442 reaper 2017-03-15T09:12:51Z