Which IPS engine detects ARP spoofing?

The Atomic ARP Engine in Cisco IPS/NGIPS is specifically designed to detect various Address Resolution Protocol (ARP) attacks, including ARP spoofing, by monitoring ARP traffic for anomalies and malicious patterns.

The Service Generic Engine is a general-purpose engine and not specialized for detecting ARP spoofing.

ARP Inspection Engine is a feature found on switches (Dynamic ARP Inspection), but 'Atomic ARP Engine' is the specific IPS engine mentioned in this context.

The AIC Engine (Application Identity and Control) is primarily used for identifying and controlling applications, not for detecting ARP spoofing.