What is a duplicate device?
Attack Surface Discovery uses a unique GUID to identify a device. Typically, whenever a customer installs Trend endpoint protection programs such as Apex One, Cloud One Workload Security or Vision One agent, agent will generate a unique GUID for this device. Normally even if multiple different agents are installed on same device, it will have the same GUID, however in some scenarios, a device will have multiple GUIDs, which leads to users seeing duplicate devices in the Attack Surface Discovery app.
What are the possible causes of duplicate device?
- Multiple types of Trend endpoint protection programs are installed on device, there will be a probability that a device has multiple GUIDs.
- If OS of device is reinstalled or if the agent is removed by uninstallation tool locally without notifying Vision One backend, then two different GUIDs are generated.
- Duplicate devices may also happen on non-persistent VDI scenario.