How to prevent users from modifying ip address manually?

[jjabaraa]

My WFilter uses "by ip address" monitoring mode, and we use static ip addresses in our network.
However, some users will modify ip addresses to bypass filtering. How can I prevent this?

[imfirewall]

Please check below solutions:

1. Do not give administraor access in client PCs, so they won't be able to change IP addresses.

2. In "Default IP policy" in "user-devices list" of WFilter, set "new found devices" to "enable monitor" and "block all". So new detected IPs will be blocked.

3. Set ip-mac binding in your router/firewall, or in WFilter. Please check: Filter IP-MAC binding solution