Audit

4 replies
2835 views

Hello, how to configure anti spoofing and statefull ??

FortiGate

Toshi_EsumiAnswer

SuperUser

Opposite. If you enabled it, it wouldn't be "anti-spoofing" and most of (stateful) FW features wouldn't work.

Toshi_Esumi

SuperUser

It's generally considered "anti-spoofing = block asymmetric routing". And statefull is any firewall that inspects the state of connections between a particular set of source and desition, i.e. session in FortiGate case. Layer3 is always state-less. So unless you disabled this base feature of FortiGate under global config (enabled asymmetric routing), you can check it off from the audit list.

Toshi