Using MAC Address in Client Address sets, possible?

[maluk]

I have a problem. I am an ISA server newbie. It is just now that we have migrated from Linux ipchains and squid to Windows Advanced server and ISA server.

We are using like SecureNAT because we just add the address in the client address sets and configure some policies then it's done. It is working. However as I have said before IP spoofing is rampant in our local network. I need help.

Most of the users in our local network (SOHO) are spoofing IPs. I figured that if client address sets were to use MAC addresses then IP spoofing could be stopped. Formerlly, we were using Linux ipchains and squid. Squid allows MAC address checking by access control lists. However, it seems ISA does not.
Rome did not create a great empire by having meetings, they did it by
killing all those who opposed them.

- janvier -

 

[rdmathews]

Have you considered installing the Firewall client and requiring ISA authentication? Your logs and reports will better identify who, what and where.