Cisco ASA Antispoofing Configuration

The Company-A security administrator wants to protect the infrastructure from spoofed sources. The administrator enables Unicast Reverse Path Forwarding (Unicast RPF) to protect against IP spoofing attacks by ensuring that all packets have a source IP address that matches the correct source interface according to the routing table. To enable Unicast RPF, navigate to Configuration > Firewall > Advanced > Anti-spoofing. Select the desired interface, and click Enable, as illustrated in Figure 12-15.

Figure 12-15 Configuring UnicastRPF

Figure 12-15 Configuring UnicastRPF

Cisco Asa Anti Spoofing Configuration

Continue reading here: Atlanta Office Cisco IOS Configuration

Was this article helpful?

0 0

Readers' Questions

  • Miriam
    How to enable antispoofing on asa firewall?
    5 months ago
  • The following commands can be used to enable anti-spoofing on the ASA firewall:
    1. Define an access list that matches all IP addresses on the internal network:access-list anti-spoofing extended permit ip any 192.168.0.0 255.255.255.
    2. 0
    3. Apply the access list to the inside interface:int e0/0 anti-spoofing inbound
    4. Enable the anti-spoofing feature:hostname(config)# antispoofing enable
    5. Commit the changes and save the configuration:wr mem