I'd just like to clarify one thing: when the machine foo connects in via VPN, does the existing entry for foo change to vpnpool-11, or do you get a new entry for vpnpool-11 being created?
The existing entry changes to vpnpool-11.
Sorry to bring this back up, but hopefully this will be helpful for some other ePO admins / mac admins. You were Very close with the scutil. You were using the get command to retrieve the ComputerName and HostName, but you can also do a set command against those to change the values. So... in our case, we use Casper to image our macs. Casper sets the ComputerNAme value in scutil, but does not set the hostname, which McAfee uses. So I have a post script (during imaging process) run on all of our machines to set the HostName to whatever the ComputerName is. Below is the shell script and single command line to use if you like.
STRING=$(scutil --get ComputerName)
scutil --set HostName $STRING
And the single command line version:
scutil --set HostName $(scutil --get ComputerName)
I know this thread is old, but this was the resolution for us and hopefully this will help somebody!