CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.

First, I hope you're all well and staying safe.
Second, I want to give a "heads up" that you should see more activity here shortly, and maybe a few cosmetic changes.
I'll post more details to the "Announcements" forum soon, so be on the lookout. -E


Results 1 to 3 of 3

Thread: Anti-spoofing config questions

  1. #1
    Join Date
    Rep Power

    Default Anti-spoofing config questions


    Checkpoint R71.30 here (yeah I know we'll upgrade soon).

    I have an issue completely understand anti-spoofing config:

    1) I create a group that I assign to the cluster interface's topology.

    In fact I merely wanted to change the name of the AS group but it doesn't let me with the message "Can not change group name while it is in use in a gateway's encryption domain, or in a logical server." So I created a new one.

    2) The new group is added fine to the cluster interface upon pushing the policy, however the "old" anti-spoofing group still seems to be in use by the individual gateways ("where used")?

    Now, which group is actually in use here?

    I have a few screenshots, see below.

    What does this mean? How do I clean this mess up?

    Thanks and best regards,

    Attached Thumbnails Attached Thumbnails Click image for larger version. 

Name:	as3.jpg 
Views:	275 
Size:	17.9 KB 
ID:	777   Click image for larger version. 

Name:	as2.jpg 
Views:	250 
Size:	31.1 KB 
ID:	778   Click image for larger version. 

Name:	as1.jpg 
Views:	323 
Size:	61.1 KB 
ID:	779  

  2. #2
    Join Date
    Rep Power

    Default Re: Anti-spoofing config questions

    Hello Jeronimo,

    Did you find a solution ?

    I have the same issue under R75.30....

    Thanks & best regards,


  3. #3
    Join Date
    Rep Power

    Default Re: Anti-spoofing config questions

    Hi guys,

    Did you find a resolution to this problem?

    I have the exact same issue on R77.30 and I want to know if the groups I added to the cluster interfaces are being used and not the auto-generated ones which apparently I cannot remove.

    Thank you,

Similar Threads

  1. Can't turn off anti-spoofing
    By Grant_Lee in forum Topology Issues
    Replies: 4
    Last Post: 2008-11-27, 07:49
  2. Anti Spoofing Issue
    By futureechos in forum Clustering (Security Gateway HA and ClusterXL)
    Replies: 7
    Last Post: 2007-08-24, 10:43
  3. Anti-spoofing vs Local interface address spoofing
    By braintek in forum Topology Issues
    Replies: 1
    Last Post: 2007-03-23, 15:58
  4. anti-spoofing
    By aallsopp in forum Check Point UTM-1 Edge Appliances
    Replies: 1
    Last Post: 2006-03-23, 12:02
  5. Anti-Spoofing
    By mdelanoche in forum Topology Issues
    Replies: 1
    Last Post: 2005-09-13, 21:00


Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts