Are these Known or Unknown endpoints?
We use Guest with mac caching which creates Known endpoints that are expected to be cleaned up with the Known Endpoints cleanup interval. The interval is based on when the endpoint was last modified.
Since we currently use Endpoints for registered mac address authentication, we cannot use that cleanup option. We periodically run a script that uses the REST API to cleanup any guest endpoints that no longer have a corresponding guest account.