Forcepoint™ Security Management Center Service Online Documentation

Home
Routing
Configuring routing and anti-spoofing
Routing defines through which next hop router the Engine forwards traffic from a source address to a destination address. Anti-spoofing defines which addresses are considered valid source addresses for the networks connected to each interface.
Examples of routing configuration
The SMCaaS Application provides features that allow you to configure many routing scenarios.

Preface
This guide provides the information you need to work with your Forcepoint product.
Introduction to SMC as a Service
The SMC as a Service provides centralized access for configuring, managing, logging, and monitoring NGFWs that secure network connectivity and control business operations.
Getting Started
Routing
- Configuring routing and anti-spoofing
  Routing defines through which next hop router the Engine forwards traffic from a source address to a destination address. Anti-spoofing defines which addresses are considered valid source addresses for the networks connected to each interface.
  - Getting started with routing
    To understand how the Engine reads routing definitions, look at the network interfaces in the routing or anti-spoofing configurations.
  - Routing configuration overview
    Routing configuration involves adding a default route, adding routes to networks that are not directly connected, and adding routes to networks that can be reached through route-based VPNs.
  - Add routers
    A Router element represents a next-hop gateway’s IP address in routing configurations.
  - Add or view the default route
    You can check which route is currently set as the default route for traffic leaving the Engine and set a new default route.
  - Add static routes
    You can add a static route to a network in the routing configuration.
  - Configure DHCP message routing
    The Engine can relay DHCP messages. If DHCP messages are routed through the Engine (from a network segment to some other, isolated segment), you must enable DHCP relay on the Engine interface properties for the interface where the DHCP requests are originating from (client’s network).
  - Check routes using the Route Query tool
    The Route Query tool allows you to check where packets with a certain IP address are routed according to the current definitions. You can check that the routing is correct and quickly find a particular branch in the Routing tree.
  - Remove static routes
    New networks are automatically added to routing when you change the properties of an interface. However, the Networks are not automatically removed, so you must check the routing configuration for obsolete entries and remove them manually.
  - Modifying anti-spoofing
    IP address spoofing is an attack where the source IP address in a packet is changed to gain unauthorized access or to cause a denial-of-service. Such attacks can be prevented with anti-spoofing rules.
  - Examples of routing configuration
    The SMCaaS Application provides features that allow you to configure many routing scenarios.
    - Examples of route selection and anti-spoofing definitions
      There are several considerations to take into account when configuring routing and anti-spoofing.
    - Example: Routing traffic with two interfaces
      To route traffic to two interfaces, add a router for each interface.
    - Example: Using policy routing to route traffic to networks that use the same address space
      To manage traffic to networks that share the same address space, create a policy routing entry for each host.
- Outbound traffic management
  You can use Multi-Link to distribute outbound traffic between multiple network connections and to provide high availability and load balancing for outbound traffic.
- Inbound traffic management
  Inbound traffic management ensures that services remain available even when one or more servers or NetLinks fail, and balances the load of incoming traffic more efficiently between a group of servers. Inbound traffic management is not supported on layer 2 physical interfaces on Engines.
- Dynamic link selection
  When you use Multi-Link for outbound traffic management or Multi-Link VPNs, SMCaaS can dynamically select the NetLink or VPN link that best matches the quality requirements of traffic.
- Advanced routing topics
Policy Creation and Administration
Monitoring
VPN

Examples of routing configuration

The SMCaaS Application provides features that allow you to configure many routing scenarios.

Examples of route selection and anti-spoofing definitions
There are several considerations to take into account when configuring routing and anti-spoofing.
Example: Routing traffic with two interfaces
To route traffic to two interfaces, add a router for each interface.
Example: Using policy routing to route traffic to networks that use the same address space
To manage traffic to networks that share the same address space, create a policy routing entry for each host.

Copyright © 2026 Forcepoint LLC