Need help to understand some things
The Manage Monitored Devices page shows all devices that are available to collect data from. RSA tells you to allow them to automatically appear, based on adding them to the Windows Service section.
If they fail to appear, then you will need to check a few things.
In enVision, use the Event Viewer to look at "NIC System" logs for any indication of Windows device errors.
Next, manually review the security event log on each affected server to determine if there are authentication issues. If there are none, then perhaps you have a firewall issue, either locally on the Windows server or from a dedicated firewall appliance. (http://support.microsoft.com/kb/832017)
Finally you may have more obscure permission issues on the problematic servers. This has to do with who has access to the Windows event logs. Read this for more - http://support.microsoft.com/kb/323076
You normally need to be an administrator to review the security log. You can use the article 323076 above to configure access for a regular account.
So in summary:
On the affected server,
1- Check for authentication errors
2- Check for local firewall issues
3- Check for Event log permission issues
On the network,
1- Determine if there is a firewall appliance blocking enVision's ability to collect logs
1 - Review the NIC System logs to see if any error appear mentioning Windows.
Hope that helps,
Thank you for your answer!
If I right understand, in normal working system, the amount of devices on this page needs to be equal amount of added windows devices. Is it right?