topic Re: Monitor spoofed IPs in General Topics

Monitor spoofed IPs

s_quasar — Sat, 02 Nov 2019 00:10:41 GMT

Is there a way to view in monitor spoofed IPs?

S.Cantwell — Sun, 03 Nov 2019 20:04:40 GMT

Hello there.

If you set up a Zone Protection Profile and configure it to block spoofed IPs, then when a spoof IP is seen, it will show in the Threat Log.

s_quasar — Mon, 04 Nov 2019 17:00:21 GMT

What have I to see in the column Type?

S.Cantwell — Mon, 04 Nov 2019 19:03:31 GMT

Probably "packet"

Remo — Mon, 04 Nov 2019 20:45:35 GMT

To see these logs you have to have installed PAN-OS 8.1.2 or higher and configure the following in CLI:

> set system setting additional-threat-log on