topic Re: IP spoofing /source routing in General Topics

IP spoofing /source routing

SajithkumarPS — Wed, 10 Feb 2021 12:44:02 GMT

Hi Friends,

I have nt enabled Zone protection for our palo alto firewalls as its connected to trusted zones. I want to know the whether IP source routing is disabled in the PA NG Firewall (Pan OS > 9.0) by default or not. Also steps to protect against IP Spoofing or IP source Routing related attacks.

Thanks in advance.

Re: IP spoofing /source routing

BPry — Wed, 10 Feb 2021 22:33:14 GMT

@SajithkumarPS,

I'm confused on what you're actually asking? You need to utilize Zone Protection to drop Spoofed IP addresses or drop Source Routing options.

Re: IP spoofing /source routing

SajithkumarPS — Thu, 11 Feb 2021 12:28:02 GMT

@BPry Hi , Thanks for the reply . There is an option(command) to disable IP Source Routing in Cisco Devices(Router or FWs). I want to know is there any commands in PA FWs to disable it or Using zone protection profiles is the only way to protect against IP source routing based attacks .

Thanks