I'm having trouble getting my head around configuring rogue system detection on ePO 4.5. Has anybody come across a best practices type guide on this at all, I've been through the product guides, install guides, etc, but I'm finding them to be very light on details and recommended configuration.
I've installed rogue sensors to cover the subnets, I've then got a query that picks up these rogue systems. A daily task then runs the query, tries to deploy an agent, (if one isn't installed already), then adds them to a rogue systems container in the system tree. But is this the right way to do it?
Any advice would be a great help.
That certainly seems a reasonable way of using RSD, yes.
In essence this is what it was designed for.