As per logs said, those machine have sequence number errors, it may they machine learn double MAC address via LAN or VPN etc.
Or do you using any HIPS network related policy in the setup ?
If you are really using agent version 4.8, I suggest to upgrade to a newer version.
Currently the latest agent version is 5.06
My clients are Win 10 Enterprise workstations and so Agent 5.0.4 would not work (KB88041), and I am in an environment that I cannot use the newest version of Agent until it is approved by my employer. So I am looking for a solution that will work with my current version of Agent.
Thanks for taking a look. Can you explain what you mean about "HIPS network related policy in the setup?" Also I don't see what you are referencing in the logs.
All that I see is that all products are being updated at each ASCI until 9/22 @1031 AM. After that there are a lot of "Plugin registry change detected" messages until the end of the Agent Log. I am not seeing any sequence number errors.
My network is sequestered and not connected to the internet or any other network, and we do not use VPN, so I am not sure how it would get double MAC addresses. Is there somewhere I can check to see if that is the case?
Thanks again for getting me started on this problem