Rogue System Detection States - McAfee EPOCDE-AA-BA - ePolicy Orchestrator - PC Product Manual

21 Detecting Rogue Systems
What are rogue systems
You can specify how the system interfaces are matched in the same manner you use to specify how
detected systems are matched. Identifying these systems and their interfaces, and managing them
with Rogue System Detection and ePolicy Orchestrator helps provide the network security your
organization needs.

Rogue System Detection states

Rogue System Detection categorizes systems, sensors, and subnets on your network with different
states to make monitoring and managing your network easier. These states determine the following:
• Overall system status
• Rogue System Sensor status
• Subnet status
The Detected Systems page displays information on each of these states via corresponding status
monitors. This page also displays the 25 subnets with the most rogue system interfaces in the Top 25
Subnets list and the adjacent Rogue System Interfaces by Subnet table.
Figure 21-1 Detected Systems page
Overall system status
Overall system status is presented in the Overall System Status monitor as a percentage of compliant
systems. Systems states are separated into these categories:
• Exceptions
• Inactive
• Managed
• Rogue
The percentage of compliant systems is the ratio of systems in the Managed and Exceptions categories
to those in the Rogue and Inactive categories.
®
266 McAfee ePolicy Orchestrator
®
4.6.0 Software Product Guide