Anti-spoofing in Firepower 1000/2000

[claudiom17]

I need to configured anti-spoofing in Firepower 1000 or 2000 using Firepower Device Manager.

I did not find the procedure in the Cisco website.

Does someone know if this option is available?

I found this option in Firepower Management Center.

https://www.tenable.com/audits/items/Tenable_Best_Practices_Firepower_Threat_Defense.audit:13bf3be4671694f285e8acdb223f49a4

[MHM Cisco World]

OMG' you meaning ip spoofing'

Thanks

MHM

[claudiom17]

Thanks, I am creating a tech specs.
Anti-spoofing measures are implemented to detect and block forged source IP addresses from entering the trusted network.

The idea is detect and block some incoming traffic.

[Rob Ingram · Accepted solution]

@claudiom17 you cannot enable anti-spoofing natively in FDM, but you can use FlexConfig to apply the ASA commands. E.g.

ip verify reverse-path interface <ifname>