In SmartView Tracker, which rule shows when a packet is dropped due to anti-spoofing?

Rule 0 is a reserved, implicit rule in Check Point that represents the anti-spoofing enforcement layer. When a packet is dropped because its source IP does not match the expected interface topology, SmartView Tracker records the drop against Rule 0, distinguishing it from any administrator-created policy rules.

A blank rule number field typically indicates a log entry not matched to any explicit rule, not specifically an anti-spoofing drop.

Rule 1 is the first administrator-created rule in the security policy, not a reserved system rule for anti-spoofing.

The Cleanup Rule is an explicit rule placed at the bottom of the policy to drop all unmatched traffic and log it; it is not related to anti-spoofing enforcement.