cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Level 11
Report Inappropriate Content
Message 1 of 3

RSD and reported rogue systems

Hi,

We have recently starting to implement RSD and installed in a couple of servers. The sensors are reporting several hundreds rogue systems, but the majority are listed with a DNS name as undefined.hostname.localhost or aXXX-XXX-XXX-XXX.deploy.static.akamaitechnologies.com. The only thing in common is the "Last Detected Organization Name" which is Cisco Systems, Inc.

I understand from a previous post that there may be a DNS related issue somewhere, but the IP addresses they referring to are not assigned to any devices on our network. Is there a way to gather more information about those rogue systems? Also, is it safe to exclude them?

Many thanks. 

2 Replies
McAfee Employee
McAfee Employee
Report Inappropriate Content
Message 2 of 3

Re: RSD and reported rogue systems

The sensor will see any traffic that is on the nic.  You can go to server settings for the RSD settings to limit what is considered rogue for your network.  You can edit the detected systems matching section to limit it to your IP ranges or other criteria, including domain names, etc.  You also might want to look at which sensor is reporting those.  Perhaps that isn't a good choice of server to install a sensor on.  

Was my reply helpful?
If this information was helpful in any way or answered your question, will you please select Accept as Solution in my reply and together we can help other members?

Level 11
Report Inappropriate Content
Message 3 of 3

Re: RSD and reported rogue systems

Hi,

Many thanks for your reply. I have already added all the networks in the policy under the option "Listen only on interfaces with IP addresses in these networks". I will also look at the sensor that is reporting those entries.

 

You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community