Hi,
We had a high priority incident where an user's external router was plugged into our LAN which kind of hampered the network connectivity. Hence, is there a way that we can set up alerting when a new device is plugged into the LAN so that the team is being notified on this.
I understand this can be fixed by enabling dhcp snooping which will be enabled in near future, but until then we would need to be notified on the same. I remember seeing a discussion where a newly discovered device is added automatically into net_connect, however we would like to know if anything is added and that to be sent as an alert. Is there an event ID or anything that can be used for this. Please advice.
-kag