Rogue Machine Detection and Remediation

Hello all,

  Forgive me if these area a little basic as I am a new Admin to this system and learning:

• Need of a solution for Rogue Machine Detection and Remediation.
• Running 12.1 RU5 with an Enterprise of 7K+ Clients
• One location with over 3K machines on set domain and 4k+ field units running in multiple locations.
• I am a little confused on some specifics and any help is greatly appreciated. I understand HI controls service packs and itterational requirements for software.
• Also understand that NAC is now "built in" to SEPM RU5.

Besides the tedious task of setting up Hundreds of ‘Unmanaged Detectors’:

1. Is there a better option for Rogue machine detection? As in Host Integrity or NAC, etc?

2. Reference the prior question: Does the new RU SNAC integration with SEP and HI work to control rogue machines at all?

3. Or is this need filled by Network Enforcer?

Thanks again for any assistance or guidance on this!