A method for detecting a proxy Address Resolution Protocol (ARP) agent in a network including at least a first machine with an IP address in a range of a first subnet, and at least one embedded controller with an IP address in a range of a second subnet. A router is also provided, wherein the second subnet is not contactable through the router provided its proxy ARP is disabled. The first machine and second machine each have static routes for inter-subnet communications. A test IP address is identified by the first machine. A test Media Access Control (MAC) address corresponding to the test IP address is then obtained. The test MAC address is compared to a range of MAC addresses for the embedded controller. An alarm is generated at the first machine if the test MAC address is outside the range of MAC addresses that can prompt actions to remove the proxy ARP condition.