Smart Device Group example

The example below illustrates how a Device Group Rule (DGR) is interpreted (the screenshot is from pre-v3.0 Conductor, but later versions work similarly):

There are two Airwall Gateways in this example, named Campus - West and Campus - East.

There are eight discovered devices, four behind the Airwall Gateway Campus - West, three behind the Airwall Gateway Campus - East, and one loaner laptop running an Airwall Agent.



In this example, the rules dynamically add devices to the group that are behind the Campus - West Airwall Gateway or devices with intermittent connections to the network, while excluding devices from Campus - East and devices belonging to the Instructor Devices group.

10 include Airwall Edge Service Campus-West

The first rule adds all devices behind the Campus - West Airwall Gateway by using the include operator, the Airwall Edge Service rule type, and the selection Campus - West argument.

This rule matches the following devices:

Please note that there is one instructor device in the result, which is a member of the Instructor Devices group that we need to remove later.

20 include [negate] Airwall Edge Service Campus-East

The next rule adds any devices that are not behind the Campus - East Airwall Gateway by using the include operator, the negate option, Airwall Edge Service rule type, and the selection Campus - East argument. This captures any laptops running Airwall Agents that may intermittently require network access.
Note: In this example, you could remove the first rule and achieve the same result. It is included to illustrate the difference between the include operator plus the negate option and the exclude operator, later in this example.


These two rules will add one additional device, Loaner Laptop 1, to the result:

30 exclude Device Group Instructor Devices

The third rule excludes all devices in the Instructor Devices group by using the exclude operator, Device Group rule type, and the selection Instructor Devices argument.

This rule removes the device, Instructor Desktop - 2nd Floor, from the result:

As more devices are discovered and managed by the Conductor, either behind an Airwall Gateway or running an Airwall Agent, the following actions will be taken by the rule:
  • A device added to the Campus - West Airwall Gateway will be added as a member
  • A device added to the Campus - East Airwall Gateway will not be added as a member
  • Any device running an Airwall Agent will be added as a member
  • Any device added to the Instructor Devices group will not be added as a member