ARP poisoning attempt - where is the log???

Hi both,

You can view ARP poisoning attempts in the CLI console with the drop-packet-capture command.

The documentation has been updated: https://docs.sophos.com/nsg/sophos-firewall/19.0/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Network/Neighbors/ARPNDP/index.html.  There's a link to the CLI guide which gives you more information on the drop-packet-capture command.

I hope this helps.

L@DocSupport

Hi both,

You can view ARP poisoning attempts in the CLI console with the drop-packet-capture command.

The documentation has been updated: https://docs.sophos.com/nsg/sophos-firewall/19.0/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Network/Neighbors/ARPNDP/index.html.  There's a link to the CLI guide which gives you more information on the drop-packet-capture command.

I hope this helps.

L@DocSupport