can we enable layer-2 spoofing detection?

Follow

FF

• September 17, 2021 19:48

Can we enable alerts when a system attempts to take over someone else IP? Especially when the spoofed IP is one of the firewalla's own interface? 

background:
I came across a layer-2 spoofing condition when a misconfigured switch came online with the same IP address as the firewalla gold main LAN interface. This was detected rather quickly by one of our monitor but firewalla didn't seem to report anything which is less than ideal. 

Regards

 

 

 

 

2

• 

  Firewalla

  • September 17, 2021 22:23

  We should be able to do this. Can you request this feature?

  Also, what monitor are you using for this type of detection? Some spoofing are legit, want to see if your tool can detect that.

  0

  Comment actions Permalink
• 

  FF

  • September 18, 2021 12:43

  • formal request added.
  • I first noticed the alert from a glasswire test PC.

  0

  Comment actions Permalink

Please sign in to leave a comment.