Rogue System Detection and alien agents

[mr54]

I'm working with ePO 5.10 and Rogue System Sensor 5.0.6 (extension Rogue System Detection 5.0.6.123).

I have tested a rogue sensor on a subnet which is composed by systems deployed on two ePO servers.

Managed systems of my first ePO server (the one with RSD) are OK, but managed systems of my second server (the one without RSD) appeared as rogues.

I added the second ePO on Server Settings (Detected System Compliance) and I ran "Query Agent" on rogues systems, that allowed me to retrieve them on Managed Systems as "alien agent".

That's perfect, but is there a way to do that automatically ? It is very time consuming having to do the Query Agent (50 systems by 50 systems) by hand.

Maybe with policies or permissions ? I'd like the alien agent to be detected at the same time as the sensor's detection, with no particular action.

Thank you for your help!

[cdinet · Accepted solution]

Are you adding these systems to the system tree?  Have you tried setting up an automatic response that will take the actions you want it to take?

[mr54]

No, I didn't add these systems on system tree, and I don't want to.

I didn't know for the automatic response, I think it respond to my question, thanks !

[cdinet]

That's great, glad to assist!