Video Screencast Help

About Unmanaged Detector

Created: 04 Sep 2013 | 7 comments

Hi All,

Why unmanaged detector detects the computers having already SEP client in my network ?

Regards.

Operating Systems:

Comments 7 CommentsJump to latest comment

.Brian's picture

Is that client reporting to the SEPM? If not, the sepm has no record of it and it will be considered unmanaged

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.

Mithun Sanghavi's picture

Hello,

Are these SEP clients communicating with the same SEPM or they unmanaged?

Are these SEP clients out of the network? Are these machines having dual NIC?

In case there are no records found of these machines in the database, unmanaged detector may have found these machines with SEP installed.

 

Mithun Sanghavi
Senior Consultant
MIM | MCSA | MCTS | STS | SSE | SSE+ | ITIL v3

Don't forget to mark your thread as 'SOLVED' with the answer that best helped you.

Rafeeq's picture

Unmanged detector will check the IP of the client in its own database. If it does not find  any that machine will be marked as Unmanaged.

Did you check if the client is communicating with SEPM?

open SEP 

Help and Support

Troubleshooting

does it show server name or offline?

Chetan Savade's picture

Hi,

Thank you for posting in Symantec community.

I would be glad to answer your query.

When a device starts up, its operating system sends ARP traffic to the network to let other computers know of the device's presence. A client that is enabled as an unmanaged detector collects and sends the ARP packet information to the SEPM. This management server searches the ARP packet for the device's MAC and IP address. The server compares these addresses to the list of existing MAC and IP addresses in the server's database. If the server cannot find an address match, the server records the device as new. You can then decide whether the device is secure. Because the client only transmits information, it does not use additional resources.

Was there any change in the IP address or host names?

Is it happening with specific machines?

What's the SEPM and SEP client version?

Chetan Savade
Sr Technical Support Engineer, Endpoint Security
Enterprise Technical Support
CCNA | CCNP | MCSE | SCTS |

Don't forget to mark your thread as 'SOLVED' with the answer that best helps you.<

SameerU's picture

Hi

It would detect if they are not reporting to your SEPM in which you have configured the unmanaged detector

Regards

 

.Brian's picture

Do you need more assistance with your problem or were you able to get it resolved?

If you could post an update for followers of this thread that would be most helpful.

Otherwise, if resolved, you can close the thread out by clicking the "Mark as solution" link at the bottom left on the most helpful post. If multiple posts helped to solve your problem, please click the "Request split solution" link at the bottom left, select the most helpful posts and click the "Submit" button. This will benefit admins looking for a resolution to the same problem.

Thanks and take care,
Brian

Please click the "Mark as solution" link at bottom left on the post that best answers your question. This will benefit admins looking for a solution to the same problem.