Audit

[Hermine]

Hello, how to configure anti spoofing and statefull ??

[Toshi_Esumi]

It's generally considered "anti-spoofing = block asymmetric routing". And statefull is any firewall that inspects the state of connections between a particular set of source and desition, i.e. session in FortiGate case. Layer3 is always state-less.  So unless you disabled this base feature of FortiGate under global config (enabled asymmetric routing), you can check it off from the audit list.

Toshi

[Hermine]

meaning if "set asymroute enable" then statefull and anti spoofing are active?

[Toshi_Esumi · Accepted solution]

Opposite. If you enabled it, it wouldn't be "anti-spoofing" and most of (stateful) FW features wouldn't work.

[Hermine]

Ah ok. Thanks