While reviewing Active Hosts information for the external network devices, such as a switch, the Mac address of the switch host is shown.
This article describes the Kerio Control's default behavior for such scenarios.
In the environment, when the users' devices are first connected to a Layer 3 network switch then directed to Kerio, this is considered to be functioning as designed. The switch should strip the MAC addresses of each packet before sending it to Kerio Control. If Kerio is able to see Mac addresses then the Switch would have a serious vulnerability.
In this case, Kerio Control is not able to identify users' devices MAC addresses, because:
- You use a routed network and the computer is placed behind a router.
For other reasons why Kerio Control might be not able to identify the MAC addresses, please refer to Configuring automatic user login in Kerio Control.