Organize Systems Into Groups For Servers And Workstations - McAfee EPOLICY ORCHESTRATOR 3.6 - WALKTHROUGH GUIDE Manual

®
ePolicy Orchestrator 3.6 Walkthrough Guide
2

Organize systems into groups for servers and workstations

Depending on how you've created your sites, and populated the Directory, you may
need to create additional groups and to further levels of organization in your Directory.
For example, by operating system.
The example in this guide creates groups in each site for servers and workstations. Use
these groups later when setting different VirusScan Enterprise policies for servers and
workstations.
The VirusScan Enterprise 8.0i policy pages for ePolicy Orchestrator 3.6.0 allow you to
set separate policy settings for servers and workstations without creating these
groups. However, grouping systems by operating system is a conceptually simple way
Note
to illustrate how using Directory groups can make managing policies easier. If needed,
create other kinds of groups that better fit your test network or policy management
needs.
To add groups to sites in your Directory and add systems to them:
1 Right-click a site that you added to the
Add Groups
2 In the dialog box, click
New Group
3 On the dialog box, type the name
4 If your network is designed to allow you to assign specific IP addresses to servers
and workstations, create an IP range for the group. For example, in the test network
shown in this guide, servers in Domain1 have IP addresses between
192.168.14.200 - 255; workstations in Domain1 have addresses 192.168.14.1 - 199.
You must also set an IP mask at the parent site. The IP mask or IP range that you set
for the group must be consistent with the IP range specified at the site level. In the
examples used in this guide, the workstations and servers in Domain1 all fit within the
Note
192.168.14.0/24 subnet.
Also note that IP management is not necessary for Active Directory systems.
To set an IP range for a group:
IP Management
a Under on the
IP Management
b In the dialog box, type an IP subnet mask or IP range to specify the
IP address ranges of systems that belong to this site.
OK
c Click to save the IP settings and close the
OK New Group
5 Click to close the
added
list.
OK Add Groups
6 Click on the
To add systems to the new groups you created:
Once the new groups appear in the Directory, drag systems from that site into the
appropriate group as you would drag files in Windows Explorer. You must drag systems
in the Directory one at a time; you cannot select multiple systems. Alternatively, you
can use the Directory search feature (right-click
multiple systems at one time.
Directory
and select
Add
.
Workstations
New Group
dialog box, click
IP Management
dialog box. The group is added to the
dialog box to add the group to your
Directory
and select
89
Installing and setting up
New Group
| .
Name
into the text box.
Add
.
dialog box.
Groups to be
Directory
.
Search
) to move
8