error of anti-spoofing on policy push

[james.mathieson]

Hi all,

Whenever I push a policy to the firewall (NGX R60) I get a message saying, anti-spoofing not configured on interface x. The interface it complains about is an external interface that leads to the internet, and it does say, external, leads to the internet.

Is there a global property setting somewhere I have missed that's causing this un-necessary error?

Kind regards

James

[lammbo]

Is this a cluster by chance?

If so, you will need to:

1) Remove the gateways from the cluster object (must be done from tree view, cannot be done from the cluster object's properties)
2) Set anti-spoofing on each individual gateway on the topology tab and insure that the interface is defined as 'External (leads out to internet)'
3) Re-join the gateways to the cluster (must be done from inside the cluster object)

[james.mathieson]

Yes, it is a cluster.

I will give that a try.

Is this something that usually messes up over time? It used to be fine some months ago, but have only just got round to solving the problems of install complaints.

Regards.

James

[lammbo]

No, I've never noted it to be one of those time related issues. If it worked before and you didn't change a thing, I don't know what to tell you. Have you recently done anything at all? (Apply an HFA or an individual hotfix)