Which of the following BEST detects an external attacker who spoofs an internal Internet Protocol (IP) address?
Ingress source-address validation detects IP spoofing by checking whether the claimed source address is consistent with the interface on which the packet arrived. Traffic that claims an internal source address but enters through an external interface is invalid and can be identified as spoofed.
Community Discussion