Smart Device Group example
The example below illustrates how a Device Group Rule (DGR) is interpreted (the screenshot is
from pre-v3.0 Conductor, but later versions work similarly):
There are two Airwall Gateways in this example, named Campus - West and Campus - East.
There are eight discovered devices, four behind the Airwall Gateway Campus - West, three behind the Airwall Gateway Campus - East, and one loaner laptop running an Airwall Agent.
In this example, the rules dynamically add devices to the group that are behind the Campus - West Airwall Gateway or devices with intermittent connections to the network, while excluding devices from Campus - East and devices belonging to the Instructor Devices group.
10 include Airwall Edge Service Campus-West
The first rule adds all devices behind the Campus - West
Airwall Gateway by using the
include operator, the Airwall Edge Service rule
type, and the selection Campus - West argument.
This rule matches the following devices:
Please note that there is one instructor device in the result, which is a member of the Instructor Devices group that we need to remove later.
Please note that there is one instructor device in the result, which is a member of the Instructor Devices group that we need to remove later.
20 include [negate] Airwall Edge Service Campus-East
The next rule adds any devices that are not behind the Campus - East
Airwall Gateway by using the
include operator, the negate option, Airwall Edge Service rule
type, and the selection Campus - East argument. This captures any laptops running Airwall Agents that may
intermittently require network access.
Note: In this example, you could remove the first rule
and achieve the same result. It is included to illustrate the difference between the
include operator plus the negate option and the exclude operator, later in
this example.
These two rules will add one additional device, Loaner Laptop 1, to the result:
30 exclude Device Group Instructor Devices
The third rule excludes all devices in the Instructor Devices group by
using the exclude operator, Device Group rule type, and the selection
Instructor Devices argument.
This rule removes the device, Instructor Desktop - 2nd Floor, from the result:
As more devices are discovered and managed by the Conductor, either behind an Airwall Gateway or running an
Airwall Agent, the
following actions will be taken by the rule:
- A device added to the Campus - West Airwall Gateway will be added as a member
- A device added to the Campus - East Airwall Gateway will not be added as a member
- Any device running an Airwall Agent will be added as a member
- Any device added to the Instructor Devices group will not be added as a member