Currently we have firewall rules that lock down servers access to our office IP only. We have a generous work from home policy so these people need to access these servers from home. When these occasions happen we add the IP address of their home to the firewall. Due to the fact that home IP's are dynamic they can change. The problem is that it would be nice to know if an existing IP on the firewall was an old IP and can be removed. If I was able to say add Rich's home to an IP on the firewall I would know who it belonged to and remove it. Or for that matter if an employee leaves I could find their IP and remove it.