Analysis about agent reports contravention data after some site stopped illegal

Access TSM, finding out that only one strategy template was configured by customer in strategy management, and illegal out-unite has been stopped already, no problems with configuration. After analysis log from trouble client, finding out that monitor illegal out-unite strategy configured by system manager allows operate offline, and the trouble client never login online after system manager stopped illegal out-unite strategy, strategy never updated, after customer agent connect with authentication server again, execute offline strategy and find contravention( the contravention record report to server after agent passed the authentication), illegal out-unite strategy canceled to execute after pass the authentication, so, what contravention records does server sees is offline contravention, not online contravention.  

Doubting that customer constitutes more than one strategy template, customer only stopped part of illegal out-unite strategy of template, but those strategies unstopped and assigned to users still work.

The problem is privy, it’s not easy to find out, if you come up against problems like this, after review configuration and confirm there is no mistakes, review the corresponding strategy has offline strategy or not, search online records of corresponding account at the same time for check.