McAfee EPOCDE-AA-BA Product Guide - Page 129

Organizing the System Tree Criteria-based sorting 12 Sorting status of systems On any system or collection of systems, you can enable or disable System Tree sorting. If you disable System Tree sorting on a system, it is excluded from sorting actions, except when the Test Sort action is performed. When a test sort is performed, the sorting status of the system or collection is considered and can be moved or sorted from the Test Sort page. System Tree sorting settings on the McAfee ePO server For sorting to take place, sorting must be enabled on the server and on the systems. By default, sorting systems once enabled. As a result, systems are sorted at the first agent-server communication (or next, if applying changes to existing systems) and are not sorted again. Test sorting systems Use this feature to view where systems would be placed during a sort action. The Test Sort page displays the systems and the paths to the location where they would be sorted. Although this page does not display the sorting status of systems, if you select systems on the page (even ones with sorting disabled), clicking Move Systems places those systems in the location identified. How settings affect sorting You can choose three server settings that determine whether and when systems are sorted. Also, you can choose whether any system can be sorted by enabling or disabling System Tree sorting on selected systems in the System Tree. Server settings The server has three settings: • Disable System Tree sorting - If criteria-based sorting does not meet your security management needs and you want to use other System Tree features (like Active Directory synchronization) to organize your systems, select this setting to prevent other McAfee ePO users from mistakenly configuring sorting criteria on groups and moving systems to undesirable locations. • Sort systems on each agent-server communication - Systems are sorted again at each agent-server communication. When you change sorting criteria on groups, systems move to the new group at their next agent-server communication. • Sort systems once - Systems are sorted at the next agent-server communication and marked to never be sorted again at agent-server communication, as long as this setting is selected. You can still sort such a system, however, by selecting it and clicking Sort Now. System settings You can disable or enable System Tree sorting on any system. If disabled on a system, that system will not be sorted, regardless of how the sorting action is taken. However, performing the Test Sort action will sort this system. If enabled on a system, that system is sorted always for the manual Sort Now action, and can be sorted at agent-server communication, depending on the server settings for System Tree sorting. IP address sorting criteria In many networks, subnets and IP address information reflect organizational distinctions, such as geographical location or job function. If IP address organization coincides with your needs, consider McAfee® ePolicy Orchestrator® 4.6.0 Software Product Guide 129