0 Replies Latest reply on Feb 1, 2011 12:33 PM by Dvanmeter

    EPO Rogue Sensors and Agent Handlers

    Dvanmeter

      Just wondering how others who have agent handlers in the dmz for remote systems handle the rogue sensor components of EPO.  Since laptops checkin from public ip's we are always running "uncovered subnets"  I cannot seem to find a setting or server task to automatically ignore all subnets outside of a certain IP range.  I can make a query and manually do this but it seems that I should be able to do this automatically.  Any thoughts on how to better manage this.

       

      Also we seem to have an issue that I have no idea why it happens.  After a period of time where everything in RSD working fine, it seems that the way it detects or reports subnets gets messed up.  For example, I use to see a subnet as 10.16.5.0, i would see all computers on that subnet between 10.16.5.0-255.  After a year or so of working fine it would stop seeing it that way and start seeing it as computer on 10.16.0.0 to 10.16.255.255 or even 10.0.0.0 to 10.255.255.255 as one subnet.  The sensor itself seems to have two subnets listed as listed below

       

      Subnet Name: 10.12.8.0
      Subnet Address10.12.8.0
      Subnet Mask255.255.255.0
      CoveredYes
      IgnoredNo
      Subnet Name: 10.0.0.0
      Subnet Address10.0.0.0
      Subnet Mask255.0.0.0
      CoveredYes
      IgnoredNo


      why is it seeing the second one of 10.0.0.0?

       

       

      Message was edited by: Dvanmeter on 2/1/11 12:33:11 PM CST