Rule ordering

Device match rules are interpreted in order. You can get very different results based on how you order your rules.

This example illustrates how changing the order of rules can change which devices are added to the group.

The first rule adds all devices behind the Campus - West Airwall Gateway. The second rule adds any devices behind Campus - East. The third rule excludes all devices in the Instructors group, removing any Instructor Desktops from the group. This results in the following group membership:
  • Classroom Desktop - 1st Floor Campus-West
  • Classroom Desktop - 2nd Floor Campus-West
  • Classroom Desktop - 3rd Floor Campus-West
  • Classroom Desktop - 1st Floor Campus-East
If you reverse the second and third rule:

You get different results. The second rule still removes Instructor Desktops in Campus-West, but it doesn't remove them from Campus-East, since that rule hasn't run yet. When the third rule runs, any Instructor devices in Campus-East are included:
  • Classroom Desktop - 1st Floor Campus-West
  • Classroom Desktop - 2nd Floor Campus-West
  • Classroom Desktop - 3rd Floor Campus-West
  • Classroom Desktop - 1st Floor Campus-East
  • Instructor Desktop - 1st Floor Campus-East

Since rules are processed in order, make sure you enter rules in an order that produces the intended result.