[ES] Multiple endpoints detected with the same IP or MAC address.
Problem Description
The customer can use the IP to query multiple terminals in the ES interface.
Alarm Information
Multiple terminals with the same IP/MAC address and consistent IP, MAC, and terminal names were found.
Root Cause
The issue is caused by ES displaying terminal/occupancy authorization on the platform side using agent.id. If the terminal environment changes, such as installing the atrust client resulting in the addition of a virtual network card, it may cause the agent.id to change, resulting in multiple terminals appearing on the platform side.
Solution
If it is confirmed that the terminal ES client version is before 3.7.2 and it is confirmed that there is an offline terminal problem after confirming the network card change, the following solutions can be considered:
- If it is confirmed that the remaining terminals are always in an offline state, they can be directly removed to release the authorization.
- In "System Management" – "Basic Settings", you can set the automatic clearance of offline terminals after X days of expiration.
Is this a temporary solution?
No
Original Link
https://support.sangfor.com.cn/cases/list?product_id=16&type=1&category_id=23417&isOpen=true