What version of ClearPass are you running?
Also what is your cleanup period ?
Before 6.10 cleanup worked based upon date endpoint first seen
After and including 6.10.x cleanup i n days after last seen - a much better idea
So your entries may have been removed from endpoint db by housekeeping and then recategorised
Also a few years there was an Arub hiccup /push of endpoint data. that really screwed up our whole estates worth of endpoint descriptions
… and another one that changed all Amazon fingerprints devices to Android
A
Original Message:
Sent: 2/1/2023 6:25:00 AM
From: Shmulik_Miata
Subject: Endpoint catagory changed?
Hi,
We had a bad morning today when we saw that all computers in the network (about 3500 computers) changed their category to VoIP devices During the night and early hours in the morning. It caused the computers to receive a different Vlan/network.
We found that the "Endpoint Profiler Fingerprints " updated yesterday at 13:00pm, does it relate?
It's not the first time it happens. when we ran CPPM a few months after we've implemented it back in 2018, All cisco routers in our network changed their category to VoIP devices.
What is wrong here?
Thank you,
Shmulik