McAfee EPOLICY ORCHESTRATOR 3.6 - WALKTHROUGH GUIDE Manual page 27

®
ePolicy Orchestrator 3.6 Walkthrough Guide
Automatically populating the Directory with this method is the result of an algorithm
that uses both IP filters you create and domain information for the NT domain to which
the new system belongs.
Be careful if you have sites or groups in your Directory with the same name as NT
domains. The domain name search rule takes precedence over the IP group rule.
Tip
If you want the system to populate the appropriate location, create the IP group under
the site or group associated with the domain, or do not create the domain group under
the site.
The server uses the following search algorithm to place systems in the Directory based
on the criteria in this order:
1 Site IP filter — If a site with a matching IP filter is found, the system is placed in
that site based on the criteria in this order:
a In a group named the same as the NT domain to which the system belongs.
b In a group with a matching IP filter.
If no group match for IP address or domain name is found, the system is placed in the
Lost&Found group of the site.
Note
2 Site Domain name — If no site is found with a matching IP filter, the server
searches for a site with the same name as the NT domain to which the system
belongs. If such a site is found, the server searches for a group with a matching IP
filter and places the system within. If no group is found, the system is placed in the
Lost&Found group of the site.
3 No site IP filter or domain name match is found — If the server cannot find an IP
or domain name match in any site, the server adds the system to the global
Lost&Found.
Best practices information
This feature is useful when not using ePolicy Orchestrator to deploy agents to systems
on your network. If you use another distribution method, the agent is installed on the
system before the system is added to the Directory. After the agent installs and calls
into the server for the first time, ePolicy Orchestrator adds it to the Directory. If you set
IP filters for the sites and groups, the system is added to the appropriate location.
Otherwise, it is added to the Lost&Found group and you must move it manually to the
appropriate group. Especially in a large network, using IP filters to get the system in the
right location can save time.
Automatic IP address sorting does not apply to systems that you add to the Directory
using Active Directory integration.
Note
ePolicy Orchestrator Directory: concepts and roles
24
Organizing the Directory and Repositories
3