To enable you to easily apply policy, agent
action, and agent settings rules to groups of endpoints, you can
define virtual groups from the ESM Console. Virtual groups enable
you to group endpoints based on static characteristics such as hostname
or unique ID; or dynamic characteristics such as a full or partial
domain or workgroup, or an IP address, range, or subnet. You can
also add existing groups to a static virtual group to create a nested
virtual group of endpoints.
In addition to using virtual groups
in policy, you can also search agent logs in the ESM Console by
To create a new virtual group:
For each virtual group you define, the ESM Console displays
and a listing of the number of workstations, servers, and groups
the virtual group
Click the action menu
Virtual Group type
specify the membership characteristics:
on existing endpoints (by hostname) or nested endpoint groups (static
—Membership based on endpoint
characteristics—such as domain, IPv4 or IPv6 address, range, or
To specify a domain as a criteria for membership,
enter a full or partial domain. The domain can optionally include
wildcard to match any set of characters
wildcard to match a single character.
identify and describe the group.
Define the membership criteria for the Virtual Group
type you selected.
After you create your group, you can:
Use the virtual group to reduce the scope of a
policy, agent settings, or agent action rule. To apply a policy
to a virtual group specify the group name in the
tab of the rule.
Add an endpoint to an existing virtual group. From the
optionally use the filters to reduce the number of results. Then
select the endpoints you want to add to the group and—from the actions
Add to an existing group
View the agent health for endpoints belonging to a virtual
group. On the
filter to display
only endpoints that match the filter criteria.