IP Address Spoofing protection on Sangfor NGAF

Newbie826401 Lv1Posted Oct-27-2025 14:59

Our NGAF system has generated several Product Protection: IP Spoofing alerts. We suspect that some of these may be either false positives or indicative of a real spoofing attack within our network. We would appreciate your assistance in analyzing the logs and verifying the source of this activity.

By solving this question, you may help 971 user(s).

Posting a reply earns you 2 coins. An accepted reply earns you 20 coins and another 10 coins for replying within 10 minutes. (Expired) What is Coin?

Enter your mobile phone number and company name for better service. Go

Rose Black Posted Feb-12-2026 10:07
  
You should check if the alerts match unusual traffic or just a routing/NAT misconfiguration, since NGAF can sometimes trigger false positives. Reviewing logs and ARP/interface settings can help confirm the source.

I Can Help:

Change

Moderator on This Board

1
148
3

Started Topics

Followers

Follow

954
194
98

Started Topics

Followers

Follow

Board Leaders