Moved to ePO product specific for quicker response.
McAfee Volunteer Moderator - Business Products
Same MAC address?
If the MAC address or IP address change then it will become rogue again. If the VM is live migrating around inside of your infrastructure the MAC can change which will cause this to happen which is by design as it looks like a new system.
Looking at Rogues. I identified the Solaris Virtual Machine running on (x86), as rogue 2thousand times . Same MAC address and the system is a VM.