Today i replaced a nic on a system and i could not reach it after wards, turns out the “Protect ARP Cache” is working fine, but it does not log anything in the firewall log that is has found a “violation” after disabling the “Protect ARP Cache” i’m able to ping the machine again, so i will turn it on again. Can someone confirm this so we can post a bug or wish request for this “Attack detections”.