Conditions for a device moving rule

Expand all | Collapse all

When you create or copy a rule to move client devices to administration groups, on the Condições da regra tab you set conditions for moving the devices. To determine which devices to move, you can use the following criteria:

• Tags assigned to client devices.
• Network parameters. For example, you can move devices with IP addresses from a specified range.
• Managed applications installed on client devices, for instance, Network Agent or Administration Server.
• Virtual machines, which are the client devices.

Below, you can find the description on how to specify this information in a device moving rule.

If you specify several conditions in the rule, the AND logical operator works and all the conditions apply at the same time. If you do not select any options or keep some fields blank, such conditions do not apply.

Tags tab

On this tab, you can configure a device moving rule based on device tags that were previously added to the descriptions of client devices. To do this, select the required tags. Also, you can enable the following options:

• Aplicar aos dispositivos sem tags especificadas

  If this option is enabled, all devices with the specified tags are excluded from a device moving rule. If this option is disabled, the device moving rule applies to devices with all the selected tags.

  By default, this option is disabled.

• Aplicar se pelo menos uma tag especificada corresponder

  If this option is enabled, a device moving rule applies to client devices with at least one of the selected tags. If this option is disabled, the device moving rule applies to devices with all the selected tags.

  By default, this option is disabled.

Rede tab

On this tab, you can specify the network data of devices that a device moving rule considers:

• Nome de DNS do dispositivo

  DNS domain name of the client device that you want to move. Fill this field if your network includes a DNS server.

  If case sensitive collation is set for the database that you use for Kaspersky Security Center, keep case when you specify a device DNS name. Otherwise, the device moving rule will not work.

• Domínio DNS

  A device moving rule applies to all devices included in the specified main DNS suffix. Fill this field if your network includes a DNS server.

• Intervalo IP

  If this option is enabled, you can enter the initial and final IP addresses of the IP range in which the relevant devices must be included.

  By default, this option is disabled.

• Endereço IP para conexão com o Servidor de Administração

  If this option is enabled, you can set the IP addresses by which client devices are connected to Administration Server. To do this, specify the IP range that includes all necessary IP addresses.

  By default, this option is disabled.

• Perfil de conexão alterado

  Select one of the following values:

  • Sim. A device moving rule only applies to client devices with a changed connection profile.
  • Não. The device moving rule only applies to the client devices whose connection profile has not changed.
  • No value is selected. The condition does not apply.
• Gerenciado por outro Servidor de Administração

  Select one of the following values:

  • Sim. A device moving rule only applies to client devices managed by other Administration Servers. These Servers are different from the Server on which you configure the device moving rule.
  • Não. The device moving rule only applies to client devices managed by the current Administration Server.
  • No value is selected. The condition does not apply.

Aplicativos tab

On this tab, you can configure a device moving rule based on the managed applications and operating systems installed on client devices:

• Agente de Rede instalado

  Select one of the following values:

  • Sim. A device moving rule only applies to client devices with Network Agent installed.
  • Não. The device moving rule only applies to client devices on which Network Agent is not installed.
  • No value is selected. The condition does not apply.
• Aplicativos

  Specify what managed applications should be installed on client devices, so a device moving rule applies to these devices. For example, you can select Agente de Rede do Kaspersky Security Center 14 or Servidor de Administração do Kaspersky Security Center 14.

  If you do not select any managed application, the condition does not apply.

• Versão do sistema operacional

  You can cull client devices based on the operating system version. For this purpose, specify operating systems that should be installed on the client devices. As a result, a device moving rule applies to the client devices with the selected operating systems.

  If you do not enable this option, the condition does not apply. By default, the option is disabled.

• Tipo de bit do sistema operacional

  You can cull client devices by the operating system bit sizes. In the Tipo de bit do sistema operacional field, you can select one of the following values:

  • Desconhecido
  • x86
  • AMD64
  • IA64

  To check the operating system bit size of the client devices:

  1. In the main menu, go to the DISPOSITIVOS → DISPOSITIVOS GERENCIADOS section.
  2. Click the Configurações de colunas button () on the right.
  3. Select the Tipo de bit do sistema operacional option, and then click the Salvar button.

     After that, the operating system bit size is displayed for every managed device.

• Versão do service pack do sistema operacional

  In this field, you can specify the package version of the operating system (in the X.Y format), which will determine how the moving rule is applied to the device. By default, no version value is specified.

• Certificado do usuário

  Select one of the following values:

  • Instalado. A device moving rule only applies to mobile devices with a mobile certificate.
  • Não instalado. The device moving rule only applies to mobile devices without a mobile certificate.
  • No value is selected. The condition does not apply.
• Compilação do sistema operacional

  This setting is applicable to Windows operating systems only.

  You can specify whether the selected operating system must have an equal, earlier, or later build number. You can also configure a device moving rule for all build numbers except the specified one.

• Número da versão do sistema operacional

  This setting is applicable to Windows operating systems only.

  You can specify whether the selected operating system must have an equal, earlier, or later release number. You can also configure a device moving rule for all release numbers except the specified one.

Máquinas virtuais tab

On this tab, you can configure a device moving rule according to whether client devices are virtual machines or part of a virtual desktop infrastructure (VDI):

• Esta é uma máquina virtual

  In the drop-down list, you can select one of the following:

  • N/A. The condition does not apply.
  • Não. Move devices that are not virtual machines.
  • Sim. Move devices that are virtual machines.
• Tipo de máquina virtual
• Parte da Virtual Desktop Infrastructure

  In the drop-down list, you can select one of the following:

  • N/A. The condition does not apply.
  • Não. Move devices that are not part of VDI.
  • Sim. Move devices that are part of VDI.