Duplicate mobile endpoints in Nebula

Issue

Each Android, Chromebook, iOS, and iPadOS user profile counts as a separate endpoint in ThreatDown Mobile Security. This inflates the endpoint count and complicates endpoint management by showing multiple endpoints with identical hostnames for the same physical device on the Endpoints page.

Environments

This ThreatDown Mobile Security issue impacts: 

• Chromebook endpoints
• Android endpoints
• iOS and iPadOS endpoints
• Nebula

Cause

The previous version of ThreatDown Mobile Security couldn't distinguish between multiple user profiles on mobile devices.

Resolution

The latest MDM deployment for ThreatDown Mobile Security now uses unique IDs, so multiple user profiles on one physical device count as a single endpoint.

Deploy the latest ThreatDown Mobile Security configuration profile to all your mobile endpoints, then remove duplicate entries using the older version from Nebula.

1. Install ThreatDown Mobile Security using the new configuration profile provided in Nebula. For more information, see Add mobile endpoints in Nebula.
2. On the Endpoints page, filter for endpoints with the older version using these two columns:
   • OS platform: 
     • ChromeOS, Android: Agent version column less than 1.4.1
     • iOS, iPadOS: Agent version column less than 1.5.
3. Select all endpoints with the older version.
4. Click Actions > Delete.
5. Confirm and delete the selected endpoints.

This removes mobile endpoints with the old ThreatDown Mobile Security app from Nebula, keeping only the newly deployed ones.