When you create or copy a rule to move client devices to administration groups, on the Rule conditions tab you set conditions for moving the devices. To determine which devices to move, you can use the following criteria:
Tags assigned to client devices.
Network parameters. For example, you can move devices with IP addresses from a specified range.
Managed applications installed on client devices, for instance, Network Agent or Administration Server.
Virtual machines, which are the client devices.
Below, you can find the description on how to specify this information in a device moving rule.
If you specify several conditions in the rule, the AND logical operator works and all the conditions apply at the same time. If you do not select any options or keep some fields blank, such conditions do not apply.
Tags tab
On this tab, you can configure a device moving rule based on device tags that were previously added to the descriptions of client devices. To do this, select the required tags. Also, you can enable the following options:
If this option is enabled, all devices with the specified tags are excluded from a device moving rule. If this option is disabled, the device moving rule applies to devices with all the selected tags.
If this option is enabled, a device moving rule applies to client devices with at least one of the selected tags. If this option is disabled, the device moving rule applies to devices with all the selected tags.
By default, this option is disabled.
Network tab
On this tab, you can specify the network data of devices that a device moving rule considers:
DNS domain name of the client device that you want to move. Fill this field if your network includes a DNS server.
If case sensitive collation is set for the database that you use for Kaspersky Security Center Linux, keep case when you specify a device DNS name. Otherwise, the device moving rule will not work.
If this option is enabled, you can set the IP addresses by which client devices are connected to Administration Server. To do this, specify the IP range that includes all necessary IP addresses.
Yes. A device moving rule only applies to client devices managed by other Administration Servers. These Servers are different from the Server on which you configure the device moving rule.
No. The device moving rule only applies to client devices managed by the current Administration Server.
No value is selected. The condition does not apply.
Applications tab
On this tab, you can configure a device moving rule based on the managed applications and operating systems installed on client devices:
Specify what managed applications should be installed on client devices, so a device moving rule applies to these devices. For example, you can select Kaspersky Security Center 14.2 Network Agent or Kaspersky Security Center 14.2 Administration Server.
If you do not select any managed application, the condition does not apply.
You can cull client devices based on the operating system version. For this purpose, specify operating systems that should be installed on the client devices. As a result, a device moving rule applies to the client devices with the selected operating systems.
If you do not enable this option, the condition does not apply. By default, the option is disabled.
In this field, you can specify the package version of the operating system (in the X.Y format), which will determine how the moving rule is applied to the device. By default, no version value is specified.
This setting is applicable to Windows operating systems only.
You can specify whether the selected operating system must have an equal, earlier, or later build number. You can also configure a device moving rule for all build numbers except the specified one.
This setting is applicable to Windows operating systems only.
You can specify whether the selected operating system must have an equal, earlier, or later release number. You can also configure a device moving rule for all release numbers except the specified one.
Virtual machines tab
On this tab, you can configure a device moving rule according to whether client devices are virtual machines or part of a virtual desktop infrastructure (VDI):
) on the right.