IP Address Spoofing protection on Sangfor NGAF

Newbie826401 Lv1Posted 2025-Oct-27 14:59

Our NGAF system has generated several Product Protection: IP Spoofing alerts. We suspect that some of these may be either false positives or indicative of a real spoofing attack within our network. We would appreciate your assistance in analyzing the logs and verifying the source of this activity.

By solving this question, you may help 978 user(s).

Posting a reply earns you 2 coins. An accepted reply earns you 20 coins and another 10 coins for replying within 10 minutes. (Expired) What is Coin?

Enter your mobile phone number and company name for better service. Go

Rose Black Posted 2026-Feb-12 10:07
  
You should check if the alerts match unusual traffic or just a routing/NAT misconfiguration, since NGAF can sometimes trigger false positives. Reviewing logs and ARP/interface settings can help confirm the source.

I Can Help:

Change

Moderator on This Board

1
151
3

Started Topics

Followers

Follow

994
207
99

Started Topics

Followers

Follow

Board Leaders