Showing results for 
Show  only  | Search instead for 
Did you mean: 
Reliable Contributor
Reliable Contributor
Report Inappropriate Content
Message 1 of 2

Configuration settings for Rogue Sensors

We are about to start testing Rogue Sensors in our network. However, I have a question about the optimal settings that we should us for Rogue Sensors. I don't want to overload the ePO server so am looking for advice from other people who are using Rogue Sensors.

Our network consists of a lot of Vlans with a potential for over 7,000 devices. I am currently thinking of just taking the defaults of 2 active sensors per Vlan. What is confusing me is the other settings.\

What are other people setting the following options too.

Sensors Detected system cache lifetime: the default is 5 minutes - what would be the best time to set this too?

Reporting time for active sensors: the default is 5 minutes - what is the optimal time to set this too?

We are thinking of just selection the option "Use ePO server to determine the active sensors".

We just want to monitor the network but no to performing any scanning. So we are thinking of turing off the option "scan detected systems for OS details".

Are there any other settings that we may want to consider? We are trying to not impact the network or any systems that may have the sensors installed on them. Are there any pitfalls with Rogue Sensors that we need to be aware off?


1 Reply
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 2

Re: Configuration settings for Rogue Sensors

Personally I would start with the defaults, and modify them if you feel it necessary - generally speaking the defaults are a good starting point.

The one big, big thing to avoid though is deploying large numbers of sensors at once. The first time a sensor communicates with ePO the server needs to generate a key pair, which is a very CPU-intensive task. If a lot of sensors try this at the same time it can have a very marked performance impact on the ePO server. Instead I'd deploy the sensors in batches - say a 50 at a time, and monitor the ePO server as they come online to make sure you're not impacted.



You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community