Deny IP spoof from

[00u18jg7x27DHjRMh5d7]

I am attempting to configure a BGP connection between Azure and our network. After completing the configuration on both sides I am getting the following error.

%FTD-2-106016: Deny IP spoof from (10.X.X.X) to 192.X.X.X on interface outside

It is blocking the BGP from connecting the SPOOF is the Peer IP of our Azure connection.

Anyone have a fix for this? Or know what I should look at to resolve this issue. 

The Firewall is a FirePower 1140 FTD we are not using FMC.

Thanks 

[MHM Cisco World]

may be you can try disable uRPF ?

[00u18jg7x27DHjRMh5d7]

I will give it a shot see if it help and get back with an update.

[Rob Ingram]

@00u18jg7x27DHjRMh5d7 uRPF might well be enabled and dropping the traffic, but doesn't mean it should be disabled - uRPF is enabled to protect the FTD from spoofing attacks. Check your routing tables.