Anti-Spoofing is typically set up on which object type?

Anti-spoofing is configured directly on the Security Gateway object in Check Point SmartConsole. Each gateway interface has a topology definition that specifies which networks are valid sources for that interface, allowing the gateway to drop packets arriving from unexpected directions. This enforcement must live on the gateway because it operates at the traffic inspection layer.

Host objects represent individual endpoints and have no interface topology settings required to enforce anti-spoofing.

The Security Management object controls policy distribution but does not inspect or enforce traffic-level protections like anti-spoofing.

Network objects define address ranges for use in policy rules but cannot independently enforce per-interface spoofing checks.