How Settings Affect Sorting; Ip Address Sorting Criteria - McAfee EPOLICY ORCHESTRATOR 4.0.2 Product Manual

Organizing Systems for Management
Criteria-based sorting
(even ones with sorting disabled) clicking Move Systems places those systems in the location
identified.

How settings affect sorting

You can choose three server settings that determine whether and when systems are sorted.
Also, you can choose whether any system can be sorted by enabling or disabling System Tree
sorting on selected systems in the System Tree.
Server settings
The server has three settings:
• Disable System Tree sorting — If criteria-based sorting does not meet your security
management needs and you want to use other System Tree features (like Active Directory
synchronization) to organize your systems, select this setting to prevent other ePO users
from mistakenly configuring sorting criteria on groups and moving systems to undesirable
locations.
• Sort systems on each agent-server communication — Systems are sorted again at
each agent-server communication. When you change sorting criteria on groups, systems
move to the new group at their next agent-server communication.
• Sort systems once — Systems are sorted at the next agent-server communication and
marked to never be sorted again at agent-server communication as long as this setting is
selected. However, selecting such a system and clicking Sort Now does sort the system.
System settings
You can disable or enable System Tree sorting on any system. If System Tree sorting is disabled
on a system, that system will not be sorted regardless of how the sorting action is taken. If
System Tree sorting is enabled on a system, that system is sorted always for the manual Sort
Now action, and may be sorted at agent-server communication, depending on the System Tree
sorting server settings.

IP address sorting criteria

In many networks, subnets and IP address information reflect organizational distinctions, such
as geographical location or job function. If IP address organization coincides with your needs,
consider using this information to create and maintain parts or all of your System Tree structure
by setting IP address sorting criteria for such groups. This functionality has changed in this
version of ePolicy Orchestrator, which now allows for setting of IP sorting criteria randomly
through the tree — you no longer need to ensure that the child group's IP address sorting
criteria is a subset of the parent's (as long as the parent has no assigned criteria). Once
configured, you can sort systems at agent-server communication, or only when a sort action is
manually initiated.
Please know that IP address sorting criteria should not overlap between different groups. Each
IP range or subnet mask in a group's sorting criteria should cover a unique set of IP addresses.
If criteria does overlap, which group those systems end up in depends on the order of the
subgroups on the Groups tab.
46 McAfee ePolicy Orchestrator 4.0.2 Product Guide