Anyone out there running Rapid7 IDR along with Citrix MCS? If so, how are you managing duplicate devices? Rapid7 creates a bootstrap.cfg that appears to be the machine's identity.

based on Rapid7 docs from a while ago... #Clearing Rapid7 Insight Agent Write-Host "Offboarding Rapid7 Insight Agent..." -ForegroundColor Green # Define the service name $serviceName = "ir_agent" # Stop the service if it's running try { $service = Get-Service -Name $serviceName -ErrorAction Stop if ($service.Status -eq 'Running') { Stop-Service -Name $serviceName -Force Write-Host "Service '$serviceName' stopped." -ForegroundColor Yellow } else { Write-Host "Service '$serviceName' is not running." -ForegroundColor Yellow } } catch { Write-Host "Service '$serviceName' not found or could not be stopped: $_" -ForegroundColor Red } # Move the config file $sourcePath = "C:\Program Files\Rapid7\Insight Agent\components\bootstrap\common\bootstrap.cfg" $destPath = "C:\Program Files\Rapid7\Insight Agent\components\bootstrap\common\bootstrap.cfg.orig" try { if (Test-Path $sourcePath) { Move-Item -Path $sourcePath -Destination $destPath -Force # Verify the file was moved if ((Test-Path $destPath) -and (-not (Test-Path $sourcePath))) { Write-Host "Config file renamed successfully to disable agent check-in." -ForegroundColor Yellow Set-Service -name $serviceName -StartupType Manual } else { Write-Host "Move operation failed: destination file not found or source file still exists." -ForegroundColor Red } } else { Write-Host "Source config file not found at expected location." -ForegroundColor Red } } catch { Write-Host "Failed to rename config file: $_" -ForegroundColor Red } Write-Host "Offboarded Rapid7 Insight Agent." -ForegroundColor Green

You did this for MCS? It looks like the script stops the Rapid7 agent, renames the bootstrag.cfg file, and sets the service to manual.

https://docs.rapid7.com/insightvm/non-persistent-vdi-correlation/ exactly that...They did the "correlation 3" option; computer startup ps1

Awesome. Thanks. I was aware of the correlation value, but we had it set to something unique for every golden image. So all clones had the same ID. Option 3 makes sense now that I'm reading through it. It sets the Correlation ID as that of the hostname.

we tried all Options but the correlation of the IDs never worked for us (in the Rapid7 Portal). Rapid7 Support could not help us.