Background:
Shared Insight Cache Virtual Appliance (SVA) Commonly has the following Issues:
Clients showing "unknown" in SEPM even though they are assigned an SVA by policy.
SEPM > Monitors > "Security Virtual Appliance" tab only shows a few clients per SVA.
SEPM > Clients > "Security Virtual Appliance" column shows, offline, unknown, not applicable.
Root cause is that the SVA and Clients check in to the manager asynchronously. Client only check in to the SVA when a manual or scheduled Scan is initiated. This means that the SVA will not have client information until a client checks in. The SVA and Client checks into the SEPM according to the sylink.xml information. When the SVA's Cache is cleared, Clients Status on the End Point Manager (SEPM) goes back to Unknown. It is also possible that a Client status will change to unknown when a scan entry is replaced in the SVA cache by a newer entry from another client.
Request that Client Historical data be kept so that a report can be run to see If/When a client has used the Cache. This report would be used to manage End Points. And administrator would be able see if Client communications are working on all the ESXi based endpoints.