Hi all,
Hope someone can help with an issue we are having. We have also gone through Symantec Support but not managing to get anywhere with that ....
We have a number of physical sites, each of which has it's own subnet and Unmanaged Detector. This has been working fine on Windows 7 VMs at the sites, however we are now trying to move over to using Windows Server 2012 R2 for our unmanaged detectors since we need to monitor a number of VLANs at the sites (the Windows 7 VMs were only monitoring the one VLAN).
For a transition period, we currently have both Unmanaged detector enabled at both the sites. We have noticed however for the VLAN which they can both see, the new Server 2012 UMDs are not detecting all the devices that the old Windows 7 UMDs do.
We then tested by creating a new unmanaged device. Using Wireshark we can see that when the unmanaged device starts up, the new UMD does get the gratuitous ARP broadcast so the issue appears to be at some point after this as it does not report in the SEPM console as being an unknown device.
Can anybody suggest what to try next?