Overall System Status - McAfee EPOLICY ORCHESTRATOR 4.0.2 Product Manual

Detecting Rogue Systems
Rogue System Detection states
The Detected Systems homepage displays information on each of these states via corresponding
status monitors. This page also displays the 25 subnets with the most rogue system interfaces
in the Top 25 Subnets list and the adjacent Rogue System Interfaces by Subnet table.
Figure 34: Detected Systems homepage

Overall system status

Overall system status is presented in the Overall System Status monitor as a percentage of
compliant systems. Systems states are separated into these categories:
• Exceptions
• Inactive
• Managed
• Rogue
The percentage of compliant systems is the ratio of systems in the Managed and Exceptions
categories to those in the Rogue and Inactive categories.
Exceptions
Exceptions are systems that don't need a McAfee Agent, such as routers, printers, or systems
from which you no longer want to receive detection information. Identify these systems and
mark them as exceptions to prevent them from being categorized as rogue systems. Mark a
system as an exception only when it does not represent a vulnerability in your environment.
Inactive
Inactive systems are listed in the ePO database, but have not been detected by a Rogue System
Sensor in a specified time, which exceeds the period specified in the Rogue category. These
McAfee ePolicy Orchestrator 4.0.2 Product Guide 193