We have currently upgrade to ePO 4.5 and begun to deploy RSD to the familiar locations, DHCP Servers, Servers, and systems throughout the enterprise. We have an extremely large enterprise world wide and I am beginning to pickup almost a thousand subnets as "uncovered" that have no devices and are not being seen by the DHCP servers? Does anyone have any thoughts on why this is happening?
Some device, at some point used that subnet. People remoting in from wifi, home, etc would be the most typical. Big issue with this is that you can't trace it back to a sensor as there is no detection vs sensor relationship, just sensor to covered subnet. Since covered subnets can be by more that one sensor you can only have a best guess!
Hope this helps.
That was my guess as well; but I am still new to RSD, so the real question is if I delete all of the uncovered subnets from ePO will I cause a loss of functionallity in systems that are on those subnets? I have sensors deployed to all of the DHCP servers; so my hope in deleting them is that the DHCP sensor will pick up these systems/subnets when the agent checks in. Please tell me if I am way off base with this or will they just repopulate because I haven't cleaned up the db?