cancel
Showing results for 
Search instead for 
Did you mean: 

RSD 4.7.2 duplicate

since updating RSD 4.7.2 I have noticed that duplicates are now forming in my exceptions and rogue devices.  After a week instead of having a few hundred rogue devices i have over 300,000.  they are all mostly duplicate ip's and computers showing up.  This did not happen when I had 4.7.1.  Anyone else having this issue?

4 Replies

Re: RSD 4.7.2 duplicate

Are these systems virtual? You can try removing the respective OUI from the RSDVMVendorOUIs table and this may help your problem. Also, for detected system matching, I added Fully Qualified DNS Name to my matching criteria, and got a lot less duplicates.

alespa
Level 7
Report Inappropriate Content
Message 3 of 5

Re: RSD 4.7.2 duplicate

I have the same issue after upgrading and we are not alone:

https://community.mcafee.com/thread/73448?start=0&tstart=0

Seems to be a generell issue with the new extension. I added the OUI of my VMs as a workaround, but hope for a resolving of this issue soon.

alespa
Level 7
Report Inappropriate Content
Message 4 of 5

Re: RSD 4.7.2 duplicate

Opened SR. Activating Fully Qualified DNS Name and Not Qualified Hostname in matching criteria should solve this.

Troja
Level 14
Report Inappropriate Content
Message 5 of 5

Re: RSD 4.7.2 duplicate

I agree to,

customer changed the values for FQDN matching which solved the problem.

cheers,

Thorsten

RSD Sensor.png