Link to home
Start Free TrialLog in
Avatar of ensermo
ensermo

asked on

ePolicy Orchestrator Rogue System Detection shows a bunch of MAC addresses instead of IP or Bios Name.

We have ePolicy Orchestrator Version 3.6.1.166 running on a Windows 2003 server for quite a while now. Regularely I log into the ePolicy console, go to Rogue System Detection and check to see if there are any new systems. Most of the times I see some new systems and unknown laptops from external workers.
But the last few weeks the list has grown to about 200 "Rogue"systems.

Apart from showing some systems now the list is showing a bunch of Mac addresses under friendly name.
Like .

Status Friendly Name IP  MAC Users Last Detect Time NetBIOS Name First Detect Time OUI Org
Rogue 00:16:35:a9:00:36   00:16:35:a9:00:36   22-7-08 8:20:46   15-7-08 8:20:25  
Rogue 00:1b:78:b7:d4:fa   00:1b:78:b7:d4:fa   22-7-08 10:43:31   15-7-08 9:02:36  
Rogue 00:0e:7f:2d:19:70   00:0e:7f:2d:19:70   23-7-08 10:03:33   23-7-08 10:03:33 Hewlett Packard
Rogue 00:0e:7f:5f:8b:b3   00:0e:7f:5f:8b:b3   23-7-08 10:03:33   23-7-08 10:03:33 Hewlett Packard

If I remove them they keep coming back.
I can't figure out where all these "Rougue" machines are coming from.
We have ocassionally one or two new machines per week but not so many.

Any ideas?
SOLUTION
Avatar of Mohammed Hamada
Mohammed Hamada
Flag of Portugal image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial