Ditto, I like the idea of anytime a new device tries to join the network, the admin would be required to authorize it.  Functionality could be turned on/off for those having to manage large numbers of devices

I too like this as I have a 13YO who knows how to spoof a MAC to bypass pauses.

Sooner rather than later please.

Yes for a paid security service on a more advanced router this should be standard. Every security test / certification has a MAC spoofing section. Apparently the CSO's oversite on the glaring security hole in every eero out there is almost contributorily negligent. When all your parental safe guards to keep your kids safe can be easily bypassed by changing your MAC (Windows 10 has this as an option) is seriously disappointing. This could be fixed by just having the previously mentioned "block new devices by default" or a default profile that all new devices go into. Then you can set a basic (no porn, off at 12AM, exclude some bad content) on this profile and sleep well. They could even up their game and also fix the ARP one too.

FYI Circle has this option but alas has the ARP security hole. I guess pick your poison.

Blocking new devices from joining the network needs to be a standard protective measure from unwanted intrusion.  A new device needs to be blocked and then allowed by the admin once identified as legit.  Orbi, at least, gives you the option to allow new devices to join automatically or block until allowed.  This feature needs to be added immediately.

Same here. It is very easy to circumvent eero-restrictions, not only for kids but also for some smart-home devices that actually randomize their Mac-Address when  they find that connections are block.

Come on Eero!  Are you paying attention to this thread?    This is a devastating flaw if you have creative, curious, and naughty children…please fix!!!

I sometimes won’t receive a mac address change when the kid makes a new one. Is anyone else having this issue? 

Such a simple solution.  Eero obviously does not listen or want to provide basic security.

Such a good mesh network.  Such terrible holes in basic security functions.

Just a shame.

"Block New Devices From Network" or "Network Lock" sounds very similar if not the same to me. One of these should be implemented. Now. I hope. It's badly needed.

I'm on the market to upgrade to Wi-Fi 6 so I started looking for confirmation that a solution to this nuisance had already shipped or was close to shipping. I'm floored to see that this no brainer request has been languishing for three years. 

Seriously please do this. Huge loop hole for all the hard work you guys did for the content filtering. 

Get off your asses and stop making this Sesame Street. You could find a person anywhere to code this 

I completely agree. My teenage son figured out how to use vmware, parallels, and xenosource to make new MAC addresses and surf bypassing network restrictions. Can you please add this feature? When can we expect it. Thank you.

How is this not standard functionnality after all this time?  

Chiming in my support for this feature.  It’s such a trivial feature to add the ability to have a default group with controls for all new devices.  I’m appalled that this hasn’t been given attention or even an acknowledgment from the Eero team that they are looking into this.  

This is much needed. I was surprised to find out that it was not possible.

Any update on this? I can't believe this has not been addressed.

none.  I had opened a ticket with their support that ewas going in circles where they would want to find something wrong with my network setup, going as was far as asking me to start my network from scratch.  I call on anyone reading this to do it as well:  open up a ticker with them;  tell them this is unacceptable that this isn't a feature yet and ask for it.  This is the only thing we can do to make them realize we want this!