Virtual Endpoint Groups
To enable you to easily apply policy, agent action, and agent settings rules to groups of endpoints, you can define virtual groups from the ESM Console. Virtual groups enable you to group endpoints based on static characteristics such as hostname or unique ID; or dynamic characteristics such as a full or partial domain or workgroup, or an IP address, range, or subnet. You can also add existing groups to a static virtual group to create a nested virtual group of endpoints.
In addition to using virtual groups in policy, you can also search agent logs in the ESM Console by virtual group.
To create a new virtual group:
- Select SettingsAgentVirtual Groups.For each virtual group you define, the ESM Console displays the unique ID, Modification Date, Name and Description, group membership Type (Dynamic or Static), and a listing of the number of workstations, servers, and groups the virtual group Contains.
- Click the action menu and then Add a new group.
- Select the Virtual Group type and
specify the membership characteristics:
- Static—Membership based on existing endpoints (by hostname) or nested endpoint groups (static or dynamic).
- Dynamic—Membership based on endpoint characteristics—such as domain, IPv4 or IPv6 address, range, or subnet.To specify a domain as a criteria for membership, enter a full or partial domain. The domain can optionally include the * wildcard to match any set of characters or the ? wildcard to match a single character.
- Enter a Name and Description to identify and describe the group.
- Define the membership criteria for the Virtual Group
type you selected.For example:
- Save your group.
- After you create your group, you can:
- Use the virtual group to reduce the scope of a policy, agent settings, or agent action rule. To apply a policy to a virtual group specify the group name in the Existing Groups field on the Target Objects tab of the rule.
- Add an endpoint to an existing virtual group. From the MonitorAgentHealth page, optionally use the filters to reduce the number of results. Then select the endpoints you want to add to the group and—from the actions menu—Add to an existing group.
- View the agent health for endpoints belonging to a virtual group. On the MonitorAgentHealth page, use the Virtual Groups filter to display only endpoints that match the filter criteria.
Manage Endpoint Groups
Manage Endpoint Groups To enable you to easily apply policy, agent action, and agent settings rules to groups of endpoints, you can define virtual groups ...
Features Introduced in Traps Endpoint Security Manager
Features Introduced in Traps Endpoint Security Manager The following topics describe the new features introduced in Traps Endpoint Security Manager (ESM) and Traps 4.2. For ...
Target Objects Target objects define the scope of a rule and the endpoints to which a rule applies. An object can be one of the ...
View Endpoint Health Details
View Endpoint Health Details From the ESM Console, select Monitor Agent Health to display a list of endpoints in the organization and their corresponding security ...
Add a New Action Rule
Add a New Action Rule For each action rule, you can specify organizational objects, conditions, and actions to take on each endpoint. Action rules apply ...
Hide or Restrict Access to the Traps Console
Hide or Restrict Access to the Traps Console By default, a user can access the Traps Console to view information about the current status of ...
Uninstall or Upgrade Traps on the Endpoint
Uninstall or Upgrade Traps on the Endpoint Create a new agent actions rule to uninstall Traps from the target objects or upgrade Traps using software ...
Common Rule Components and Actions
Common Rule Components and Actions Each type of rule has a specific set of required and optional fields that you can customize to meet the ...