Managing Endpoint Groups

Endpoint grouping allows you to apply security policies to entire groups, instead of individual endpoints.


To use this feature, you must first complete the Initial Setup wizard on the Endpoint Groups tab.

Completing Initial Setup allows you to create endpoint groups, use policy-based settings management, and access other features.

  1. Go to Endpoint Security Operations > Endpoint Inventory > Endpoint Groups.

    The Endpoint Groups screen appears.

  2. Create a group and assign endpoints by clicking + under the All Endpoints group.
    • Each company can have a maximum of 30 groups.

    • Groups can have a maximum of 5 layers and 10 criteria.

  3. Specify a group name and up to 10 criteria for each group.

    You can only assign endpoints to one subgroup at a time.



    Endpoint name

    Select an operator, then specify a full or partial name.

    IP range

    Specify the starting and ending addresses.

    Operating system

    Select an operating system from the list.


    To find your Windows operating system info, go to Which version of Windows operating system am I running?

    To view Windows Server release info, go to Windows Server release information.

    • Endpoints are dynamically reassigned if their properties change to match the criteria of another group.

    • Endpoints matching criteria of more than one group are assigned to the left-most group with matching criteria.

    • Endpoints pinned to a group using the Pin Endpoints option from the endpoint inventory list are not assigned to any other group until using Unpin from Group is used.

  4. (Optional) Click Preview endpoints.
  5. Click Save.

    The new group populates with all matching endpoints from the parent group.

  6. (Optional) You can also perform the following actions:



    Apply policies to endpoints

    Go to Endpoint Policies to apply policies.

    For more information, see Endpoint Policies.


    Changes do not take effect until you complete the initial setup.

    Delete endpoint groups

    Click on the group name, and then click Delete.


    Orphaned endpoints are automatically assigned to parent groups.