How to enable Unicast Reverse Path Forwarding on the external interfaces on FTD and ASA firewall ?

[Francesco Molino]

Hi

On ASA, the command is:
ip verify reverse-path interface interface_name

Take a look at this documentation:
https://www.cisco.com/c/en/us/td/docs/security/asa/asa91/configuration/firewall/asa_91_firewall_config/protect_tools.html

For FTD, when you're in the interface config, you should find the ip spoofing parameter under security tab within advanced options.

[damode]

Thank you very much for your reply.

I will try it out.

[Francesco Molino · Accepted solution]

Ok no problem. Let me know when you've tested.

For FTD, this is the procedure when using FMC. If you have FDM, you can use the same command as ASA but you need to use Flexconfig object to push it.