Rogue Detection System 5.0.5.123 : deploy.static.akamaitechnologies.com?

[mosel]

Hi there,

First time poster here.

I manage a network that that includes roughly 75 workstations and we've recently deployed Rogue Detection System 5.0.5.123 and within our environment. Shortly after deployment, we noticed that within the detected systems page, all managed and rogue names have the  DNS Name & Canonical name columns started listed as below,

The DNS entry and our domain are missing but have been replaced by deploy.static.akamaitechnologies.com

I've uninstalled the rogue sensor, reinstalled and cleared the sensor's data but all our systems within the detected systems page show as above.

Has anyone seen this before and what can be done to resolve it?

System:

McAfee ePolicy Orchestrator 5.9

Rogue Detection System 5.0.5.123

Thank you.

M

[GotEPO]

You're missing DNS A and PTR records for these nodes, which is why their resolving to this weird name. I think the developers did this intentionally, because I have seen it before as well, but the reason isn't documented anywhere.

[cdinet]

How many sensors are deployed? Are those Akamai domain name systems all detected by the same sensor, or several? It is likely a DNS issue on the machine the sensor is installed on, forwarding the lookups to an external DNS provider