Hello,
New 8.8 SP-2 installed on new core, with over 350 agents from previous 8.7 core
I ran an unmanaged device discovery using 6 ip ranges to discover PC's
1. Why does the unmanaged discover list include devices that are not in the ranges I specified?
2. Why did I only pick up 1/2 of my PC's? in the All devices folder?
To be honest, I don't see why you would find ANY of the computers that appear in your All devices folder. By definition, devices in your all devices folder are in fact Managed.
And just a guess, but did you specify things other than IP? Like maybe LDAP or NT domain. If the NT Domain check box is checked it will go well beyond the IP's you set up.
I think this is a case of needing more information to give you a good answer.
In Tools/Configuration/Unmanaged Device Discovery\ And clicking on the first icon (Scan Network) Then the (Scanner Configuration) More button I see the default setting is to Discover devices using the standard network scan (Recomended)
With this box checked it apparently searched other parameters but it does not say what standard scan is?
I agree that LANDesk found 174 managed devices. my question 2. is why only 174 managed devices when I had over 350 last week with LD8.7?
New 8.8 SP-2 installed on new core, with over 350 agents from previous 8.7 core
I ran an unmanaged device discovery using 6 ip ranges to discover PC's
1. Why does the unmanaged discover list include devices that are not in the ranges I specified?
2. Why did I only pick up 1/2 of my PC's? in the All devices folder? (Managed)
Well, from my 32bit console, I have Standard LANDesk agent checked as well as PDS2 Discovery. Not sure from the console what the options are, but this is how I found my "managed: clients that were on my old core. I will runa test and see if it still scans for me.
Yea, try checking Discover Devices with LANDesk CBA installed and the box under that PDS2 installed
I am scanning now with CBA and PDS2 checked.
Can you tell me what CBA and PDS2 stand for?
CBA_anonymous is an account that is created by CBA8 when an anonymous connection to it is created. It is a guest account.
And I think PDS2 stands for LAndesk "Ping Discovery Service" but don't quote me on that.
Did that fix it for you?
When you do a scan for the CBA or PDS2 it is a directed broadcast packet, usually dropped by all routers these days when crossing subnets.
Might not do you any good.
I still have the same number of discovered devices in the Managed all devices folder.
I have about 250 unmanaged devices in the unmanaged devices computer folder, many of which were managed in 8.7 last week. What is different?
Are you ever filtering out machines that aren't on the network any more? If not, the old 350 node number included everything that was ever seen, even once. With XDD turned on, that can get big fast. ldms_core cleans them out for you, among other things.
Are you sure the following is covered:
You are scanning all of the ip address ranges you need to scan
A good way to find out is to create a dummy targeted multicast job for cache only and then see the subnets identified in the multcast console when the job starts since it breaks the job into the detected subnets in the inventory automatically
All of the machines are definitely on at the time that you scan
Your number appears to have increased against your first post so is it just that machines are coming back online over time?
Your machines have their firewall configured correctly for communication
Just because they had an 8.7 agent on them doesn't mean 100% that they were still contactable by ping
Identify 'missing' machines on a target subnet and try this yourself when you know for certain they are online
If you are really confident that all 350 machines should be contactable at the time of your ping sweep then use your old 8.7 server and target them with a very simple script such as an inventory scan. How many devices in that task report as being non-contactable? if they all come back positive then there is something wrong with the ping sweep either in the settings or a bug.
In short, you suspect that the results are innacurate. this is either incorrect configuration on the sweep, systems not responding, a bug in UDD, or incorrect expectations. Using the above you should be able to work out which is the case.
Mark Star - MarXtar LANDesk Enhancements
Home of Power State Notifier & Wake-On-WAN for LANDesk
Not to sound daft, but if it were me.......
I would run an nMap scan of the IP ranges you have in unmanged discovery and see if the machines show up and show the correct ports open. Let's make sure they are able to be seen at all via something that is not LANdesk or Microsoft. After we confirm that they show up with nMap then we can figure out what is borking this process.
Jack has a great little integration for the core server that runs nMap to fingerprint machines, you might look into that as well.
It would seem to me if you can not use LANdesk unmanaged discovery to find them and plain old nMap doesnt see them then it is a firewall issue? nMap can/does scan across sub-nets and get by routers just fine. Zenmap is a nice GUI version that works well, I would suggest just out putting it to a file otherwise it can get unmanageable.
It ever work out?
| ||||||
