since updating RSD 4.7.2 I have noticed that duplicates are now forming in my exceptions and rogue devices. After a week instead of having a few hundred rogue devices i have over 300,000. they are all mostly duplicate ip's and computers showing up. This did not happen when I had 4.7.1. Anyone else having this issue?
Are these systems virtual? You can try removing the respective OUI from the RSDVMVendorOUIs table and this may help your problem. Also, for detected system matching, I added Fully Qualified DNS Name to my matching criteria, and got a lot less duplicates.
I have the same issue after upgrading and we are not alone:
https://community.mcafee.com/thread/73448?start=0&tstart=0
Seems to be a generell issue with the new extension. I added the OUI of my VMs as a workaround, but hope for a resolving of this issue soon.
Opened SR. Activating Fully Qualified DNS Name and Not Qualified Hostname in matching criteria should solve this.
I agree to,
customer changed the values for FQDN matching which solved the problem.
cheers,
Thorsten
New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.
Thousands of customers use our Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership: