Catalyst Security features April 16, 2008 ARP cache poisoing can be best prevented by using these catalyst security features: Dynamic ARP inspection (DAI) DHCP Snooping