Can BorderWare detect IP address spoofing?
Yes. Source routed packets are considered to be insecure packets by the kernel, source routed packets are one of the major spoofing mechanisms. No additional detection of MAC level to IP address mappings is done beyond the standard ARP cache checking. Such checking would only be relevant for the directly connected LAN and would not be useful for an organization with multiple subnets. There are further mechanisms embedded in the networking code that make it impossible for an external host to impersonate an internal host.
