Can BorderWare detect IP address spoofing on local network?
Yes. Source routed packets are considered to be bad packets by the kernel, which is one of the major spoofing mechanisms. No additional detection of MAC level to IP address mappings is done beyond the standard ARP cache checking. Such checking would only be relevant for the directly connected LAN and would not be useful for an organization with multiple subnets. There are further mechanisms embedded in the networking code that make it impossible for an external host to impersonate an internal host.
