Unknown devices that are not part of the network show in the Advanced EPDR/EDR management console

Rogue devices that are not part of the network show in the Advanced EPDR/EDR management console

• Advanced EPDR
• Advanced EDR

Unknown devices that are not part of the network environment show with random names in the Advanced EPDR/EDR management UI. Each device uses up a license and shares these characteristics:

• MAC address starting from 00:15:5D
• Installing state
• Last connection date is not current

Cause

Third-party security applications run and capture the installation file or URL and install the communications agent on sandbox devices which are immediately integrated into the list of devices.

Remove the device from the Aether console. For information on how to do this, see the Remote uninstallation article.

If this reoccurs, you can use the Computer Maintenance feature to delete specific filter matches. For more information, see the Computer Maintenance article.