Types of Rogue System Detection

It is important to understand that Rogue System Detection server and sensor configuration varies depending on the type of systems and subnets being listened to and how they appear on the Detected Systems page.

Here is a look at the four most common types of rogue systems that appear on the Detected Systems page.

Figure 1. Rogue System Detection examples


The four most common rogue system detections are:

A Broadcast network rogue system detections — These are DHCP-enabled systems that are missing the McAfee Agent. These systems are the most common rogue systems.
B Rogue systems whose operating systems don't support McAfee Agent installation — For example, printers and mainframe computers.
C Static IP address rogue systems' detections — These are mission-critical servers connected to a subnet with a static IP address.
D Subnets where all systems' operating systems don't support McAfee Agent installation — For example, Voice Over Internet Protocol and mainframe computer subnets.