Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Verified Answer
  • Locked Locked
  • Replies 1 reply
  • Subscribers 40 subscribers
  • Views 5927 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

IP Spoofing Errors

Wessk

Hi,

Suddenly I am not able to access Internet because of below on my sophos xg FW. The source IP is sophos Interface to ISP.

This suddenly happened a few hours ago. What do I need to do?



This thread was automatically locked due to age.
Parents
  • FormerMember
    0 FormerMember

    Hi , Thanks for reaching out to Sophos Community

    This is usually triggered when the spoofing is turned on.

    XG checks IP spoofing based on two conditions, Either the network ( of the source IP) should be directly connected or XG should have the routes to reach to the network (of the source IP). If this condition is not satisfied then it'll be considered as a spoofed IP.

    In your specific scenario, ensure that XG has the route to reach the source IP if not directly connected. And if the route isn't present, then you can add a static route to minimize the issue. 

    Click here for more info on IP Spoofing.

Reply
  • FormerMember
    0 FormerMember

    Hi , Thanks for reaching out to Sophos Community

    This is usually triggered when the spoofing is turned on.

    XG checks IP spoofing based on two conditions, Either the network ( of the source IP) should be directly connected or XG should have the routes to reach to the network (of the source IP). If this condition is not satisfied then it'll be considered as a spoofed IP.

    In your specific scenario, ensure that XG has the route to reach the source IP if not directly connected. And if the route isn't present, then you can add a static route to minimize the issue. 

    Click here for more info on IP Spoofing.

Children
No Data
Unfiltered HTML