We have ePolicy Orchestrator Version 3.6.1.166 running on a Windows 2003 server for quite a while now. Regularely I log into the ePolicy console, go to Rogue System Detection and check to see if there are any new systems. Most of the times I see some new systems and unknown laptops from external workers.
But the last few weeks the list has grown to about 200 "Rogue"systems.
Apart from showing some systems now the list is showing a bunch of Mac addresses under friendly name.
Like .
Status Friendly Name IP MAC Users Last Detect Time NetBIOS Name First Detect Time OUI Org
Rogue 00:16:35:a9:00:36 00:16:35:a9:00:36 22-7-08 8:20:46 15-7-08 8:20:25
Rogue 00:1b:78:b7:d4:fa 00:1b:78:b7:d4:fa 22-7-08 10:43:31 15-7-08 9:02:36
Rogue 00:0e:7f:2d:19:70 00:0e:7f:2d:19:70 23-7-08 10:03:33 23-7-08 10:03:33 Hewlett Packard
Rogue 00:0e:7f:5f:8b:b3 00:0e:7f:5f:8b:b3 23-7-08 10:03:33 23-7-08 10:03:33 Hewlett Packard
If I remove them they keep coming back.
I can't figure out where all these "Rougue" machines are coming from.
We have ocassionally one or two new machines per week but not so many.
Any ideas?
Start Free Trial
