Source for Rogue Devices
Applied the latest hotfix, and Im still not seeing the "source" of devices. For instance, Oputils is polling some routers to get the mac addresses. There are not any managed switches at these locations. The device shows up, and I have no idea where it is. Now most instances you can be pretty sure by the IP, but others I cannot. For instance, what if a machine tries to get on the network without DHCP and a different subnet. Of course, it wont work. But then it uses dhcp and gets a valid IP, this would be nice to track. Also, I have VPN CLients that connect and Im polling my PIX firewall. If I knew that the PIX was the "source", that would help me narrow down where it could be coming from.