cancel
Showing results for 
Search instead for 
Did you mean: 
avilt
Level 7

Rogue System Sensor Detects as Printer

I have setup RSD on ePO and on clients for each subnet. In my ePO it shows all L3 interfaces from Cisco L3 switch as printers. I expect this to display it as unknow or Cisco device. How can I fine tune this settings and reporting?

0 Kudos
7 Replies
tao
Level 13

Re: Rogue System Sensor Detects as Printer

Have you updated the Detected System OUIs: The OUI (Organizational Unique Identifier) is used to identify the vendor, manufacturer or other organization of a particular piece of equipment. ePO uses this to identify the vendor of a specific network interface controller (NIC) whether physical or virtual. This information is maintained by the IEEE Registration Authority. (Server Settings / Detected System OUIs)

0 Kudos
avilt
Level 7

Re: Rogue System Sensor Detects as Printer

Where can I get these OUI for ePO. Also does ePO store MAC address of each managed device?

0 Kudos
avilt
Level 7

Re: Rogue System Sensor Detects as Printer

Following list is available, which list should I import in ePO?

IEEE MA-L Assignments (.csv)

IEEE MA-M Assignments( .csv)

IEEE MA-S Assignments (.csv)

IEEE IAB Assignments (.csv)

IEEE CID Assignments (.csv)

IEEE Ethertype Assignments (.csv)

IEEE Manufacturer ID Assignments (.csv)

IEEE Operator ID Assignments (.csv

0 Kudos
tao
Level 13

Re: Rogue System Sensor Detects as Printer

You may consider going to ePO / Configuration Server Settings / Detected System OUIs / Edit / Update

Untitled.png

0 Kudos
avilt
Level 7

Re: Rogue System Sensor Detects as Printer

Thank you, updated the file

Now under interface it shows it as Cisco but still the OS is listed as Rico Printer.

0 Kudos
boschind
Level 9

Re: Rogue System Sensor Detects as Printer

it happens in my ePO installation too - ricoh printer reported as Cisco OUI

does exist an alternative addr where to update OUI list ?

http://standards.ieee.org/regauth/oui/oui.txt

update: just found this link Sanitized IEEE OUI Data (oui.txt)

is someone using it ?

0 Kudos
boschind
Level 9

Re: Rogue System Sensor Detects as Printer

hello avilt

have you configured the OUIs sensors exclusion list ?

this should help to reduce the workload for RSD sensors and ePO server

0 Kudos