Gratuitous ARP must be disabled.
A gratuitous ARP is an ARP broadcast in which the source and destination MAC addresses are the same. It is used to inform the network about a host IP address. A spoofed gratuitous ARP message can cause network mapping information to be stored incorrectly, causing network malfunction.
Disable gratuitous ARP on the device.
Review the configuration to determine if gratuitous ARP is disabled. If gratuitous ARP is enabled, this is a finding.
Information Assurance Officer