Agent asset correlation improvements FAQ

Rapid7 is currently addressing a potential licensing impact for customers. The number of assets, for some, may have increased following improvements made in product version 6.6.229 and a subsequent duplication issue (fixed in product version 6.6.230).

Here are some key questions we’ve put together to anticipate any questions you might have. If there are additional questions that you don’t see here, reach out to your Customer Success Advisor.

Why has my asset count increased?

We have improved the accuracy of our asset correlation algorithm when correlating agent assets. This change now gives a higher weighting to Citrix IDs and Rapid7 Insight Agent IDs to ensure the Security Console will always use the most accurate ID available.

In addition, we identified an issue in product version 6.6.229 that caused specific assets with unique identifiers to be duplicated for some customers.

What actions are being taken?

We addressed this issue with a fix released in product version 6.6.230 (available as of December 7, 2023). This fix involves querying the database for any incorrectly duplicated asset and removing it. There may be a slight delay in start-up after you upgrade your Security Console to version 6.6.230 due to a series of checks and updates that will be performed for the assets that were impacted.

The next time an asset integrates with an agent-based assessment, it will correlate data to the asset with the data that originally existed before the 6.6.229 release. Any data from an impacted asset between 6.6.229 and the 6.6.230 install date will be removed from the Security Console. This will impact the data displayed in features such as reporting, dashboards, and Goals/SLAs between November 29, 2023 and December 7, 2023.

Future assessment data will be collected as expected, and the graphs and charts within the Security Console will update upon subsequent automated integration of the Insight Agent data to the Security Console.

What if my correlation count is still increased after implementing the fix?

If asset counts are still inflated after you’ve upgraded your Security Console to product version 6.6.230 and you’re exceeding your license count, it is advised that you contact your CSA.

The asset count displayed accurately reflects your environment, though it may be higher than your asset count before the release of product version 6.6.229. Previously, assets with a valid Agent ID were over-correlated because they were not treated as separate assets. Following the 6.6.230 release, these specific assets are now counted as separate assets. To verify this, we suggest utilizing the unique identifiers found on the asset pages. Locate the Rapid7 Agent ID and ensure it differs between each asset.

Additionally, your asset count may have increased because we are now counting VDIs toward your license count if the Citrix VDI ID changes. If you are seeing exponential asset count increases, verify with your Citrix Admins that the Citrix VDI ID remains the same and that you’re utilizing either Citrix Desktop as a Service or Citrix Workspace for your Citrix environments.