Managing Endpoint Groups

Endpoint grouping allows you to apply security policies to entire groups, instead of individual endpoints.

1. Go to Endpoint Security Operations > Endpoint Inventory > Endpoint Groups.

   The Endpoint Groups screen appears.

2. Create a group and assign endpoints by clicking + under the All Endpoints group.
   Important:

   • Each company can have a maximum of 30 groups.

   • Groups can have a maximum of 5 layers and 10 criteria.

3. Specify a group name and up to 10 criteria for each group.
   Note:

   You can only assign endpoints to one subgroup at a time.

   Criteria	Options
   Endpoint name	Select an operator, then specify a full or partial name.
   IP range	Specify the starting and ending addresses.
   Operating system	Select an operating system from the list. Tip: To find your Windows operating system info, go to Which version of Windows operating system am I running? To view Windows Server release info, go to Windows Server release information.

   Important:

   • Endpoints are dynamically reassigned if their properties change to match the criteria of another group.

   • Endpoints matching criteria of more than one group are assigned to the left-most group with matching criteria.

   • Endpoints pinned to a group using the Pin Endpoints option from the endpoint inventory list are not assigned to any other group until using Unpin from Group is used.

4. (Optional) Click Preview endpoints.
5. Click Save.

   The new group populates with all matching endpoints from the parent group.

6. (Optional) You can also perform the following actions:

   Action	Description
   Apply policies to endpoints	Go to Endpoint Policies to apply policies. For more information, see Endpoint Policies. Note: Changes do not take effect until you complete the initial setup.
   Delete endpoint groups	Click on the group name, and then click Delete. Note: Orphaned endpoints are automatically assigned to parent groups.