Logical / physical address state lifecycle management

A method comprising:

• capturing, at a router, a first data packet from a first network;
• transmitting the first data packet from the router to a security device, the security device to determine whether the first data packet is associated with a threat;
• and
• in response to the security device determining that the first data packet is associated with the threat, obtaining, at the router, a second data packet to adjust an address resolution protocol (ARP) table of the router to mask a device communicatively coupled to the router from the threat.

A storage device or storage disc comprising instructions that, when executed, cause a machine to at least:

• capture, at a router, a first data packet from a first network;
• transmit the first data packet from the router to a security device, the security device to determine whether the first data packet is associated with a threat;
• and
• obtain, at the router, a second data packet to adjust an address resolution protocol (ARP) table of the router to mask a device communicatively coupled to the router from the threat when the security device determines that the first data packet is associated with the threat.