ARP poisoning attempt - where is the log???

Hi both,

You can view ARP poisoning attempts in the CLI console with the drop-packet-capture command.

The documentation has been updated: https://docs.sophos.com/nsg/sophos-firewall/19.0/Help/en-us/webhelp/onlinehelp/AdministratorHelp/Network/Neighbors/ARPNDP/index.html.  There's a link to the CLI guide which gives you more information on the drop-packet-capture command.

I hope this helps.

L@DocSupport

Hi friends,

I wish you nice day. Have you some answer for me? Where is the LOG??

Hi, i'm facing the same issue

Hi Jiri Hadamek,

Thanks for your query.

We’re looking into this for you and will update you as soon as possible. 

Kind Regards,

L@DocSupport