2 Replies Latest reply: Nov 29, 2011 6:30 AM by paulitus RSS

    Problems with epo 4.6

    paulitus

      Hello everybody,

       

      I'm new in this community, and a little inexpert with Epo systems, but there are my question/s:

       

      I have installed an EPO4.6 in my network and I have many problems, one of these are when I configure the differents subnets I have uncovereds nets, in spite that I have installed the rogue system in some machines, my subnet is never covered by 100%. Many of the sensors are in Passive state, and I understand that there is something not configurated correctly.

       

      The status of my rogues system are:

      Sensor Health: Marginal

       5

       

      Active
      | 11

       

      Passive
      | 2

       

      Missing

       

      Then, my status subnet is something like this:

      Covered Subnets: 60%

       3

       

      Covered
      | 0

       

      Contain Rogues
      | 2

       

      Any idea of what I'm doing bad?

       

      I'm sure that the systems with the sensor are always on, but I dont know why  the systems stops reporting to my epo system...

       

      I'm sorry about my bad English, and I hope that I have explained myself correctly.

       

      Very thanks.

        • 1. Re: Problems with epo 4.6
          pierce

          hey,

           

          Missing sensors are easy, means the machine is offline or not checked into ePO in two days. click onto the missing and it will list the machines and you can check on those devices. One user uninstalled a sensors and this was recorded as 'uninstalled' so it must be an issue with the machine talking to ePO.

           

          I believe Passive sensors are where you have multiple sensors on the same network subnet, I have this as well and dont worry too much about it. Means you have one active sensors and one(or more) as a backup if it goes offline.

           

          Subnet coverage shows you have 2 discovered subnets with no sensors monitoring, check what these subnets are (if you have a rogue sensor on a laptop it might pick up a home wireless networking for example). if you dont need to monitor delete them and you will get to 100%.

           

          mine is 15 covered, 16 contains rogues and 55 uncovered, but I am testing with lots of wandering laptops to see where they go in our network(it is limited to only record out networks IP range so wont start scanning their home network but will record it as a uncovered subnet)

           

          thanks,

          Pierce

          • 2. Re: Problems with epo 4.6
            paulitus

            Very thanks for your answer.

             

            I have repaired the topic of sensors, I have installed many sensors in the same net, and when one of this are off, there are another on.

             

            Now, the mainly problem that I have is that in the Menu -> Detected Systems I have, In the Compliant Systems, very duplicated machines, like this:

             

            NM102736

            10.128.28.76

            N/A

            DURSITP10

            11/28/11 7:31:08 PM

            Windows

            Hewlett Packard

            6.1

            NM102736

            10.128.28.76

            N/A

            DURSITP10

            11/29/11 7:43:45 AM

            Windows

            6.1

            NM102736

            10.128.28.76

            N/A

            DURSITP10

            11/29/11 8:55:55 AM

            Windows

            Hewlett Packard

            6.1

            NM102736

            10.128.28.76

            kmones

            DURSITP10

            11/29/11 9:56:02 AM

            Windows

            Hewlett Packard

            6.1

            NM101793

            10.128.28.97

            47100060q

            DURSITP10

            11/29/11 11:50:01 AM

            Windows

            Hewlett Packard

            6.1

            NM101793

            10.128.28.97

            47100060q, aticdw

            DURSITP10

            11/29/11 10:50:01 AM

            Windows

            Hewlett Packard

            6.1

            CERCA3

            10.128.28.98

            lgraells

            DURSITP10

            11/28/11 10:02:11 AM

            Windows

            6.1

            CERCA3

            10.128.28.98

            N/A

            DURSITP10

            11/25/11 4:47:37 PM

            Windows

            6.1

            CERCA3

            10.128.28.98

            N/A

            DURSITP10

            11/28/11 9:02:12 AM

            Windows

            6.1

            CERCA3

            10.128.28.98

            lgraells

            DURSITP10

            11/22/11 4:16:46 PM

            Windows

            6.1

             

             

            Sometimes there are one machine until more than 8 times, I dont know why it is,
            Someone can help me?

            Thanks!