In reply to Paul Hourmouzis.

If no software is installed on the end hosts, how can you track? It seems that they are being sent to a different subnet so you may have the device spanning off the router or use the ng device as the router. But how would that stop or notify a lateral movement within the same Layer 2 subnet with no additional software like you said.