IP spoofing /source routing

[SajithkumarPS]

Hi Friends,

I have nt enabled Zone protection for our palo alto firewalls as its connected to trusted zones. I want to know the whether IP source routing is disabled in the PA NG Firewall (Pan OS > 9.0) by default or not.  Also steps to protect against IP Spoofing or IP source Routing related attacks. 

Thanks in advance.

S

[BPry]

@SajithkumarPS,

I'm confused on what you're actually asking? You need to utilize Zone Protection to drop Spoofed IP addresses or drop Source Routing options. 

[SajithkumarPS]

@BPry  Hi , Thanks for the reply .  There is an option(command) to disable IP Source Routing in Cisco Devices(Router or FWs). I want to know is there any commands in PA FWs to disable it or Using zone protection profiles is the only way  to protect against IP source routing based attacks .

Thanks