Kaspersky Anti Targeted Attack Platform

Manually arranging devices into groups

This section contains instructions on how to manually manage the placement of devices in the group tree. Only users with the Senior security officer role can arrange devices in the group tree.

In this section:

Including a device in a group

Including multiple devices in a group

Removing a device from a group

Removing multiple devices from groups

See also

Moving servers with components and groups to other groups on the network interactions map

Page top
[Topic 189342]

Adding a device to a group

To add an individual device to a group when managing the table:

  1. Use the web interface to connect to the Central Node with the Senior security officer role.
  2. Select the device in the Assets section on the Devices tab or in the Network map section.

    In the Network map section, you can select the device to add to a group on the network interactions map as well as the topology map.

    The details area is displayed in the right part of the web interface window.

  3. Click Edit.
  4. In the details area, go to the Settings tab.
  5. Click the Icon representing a structure of folders. icon in the right part of the Group field.

    The Select group in tree window appears.

  6. In the device group tree, select the relevant group.

    If the relevant group is not in the tree, you can add it in the currently displayed Select group in tree window.

  7. Click Select.

    The path to the selected group appears in the Group field.

  8. Click Save in the details area.

    This button is unavailable if the device settings do not contain all the required information or if some of the specified settings are invalid. Tabs with settings that require a correct value is marked with the Red dot icon. icon.

Page top
[Topic 283664]

Adding multiple devices to a group

You can add multiple devices to a group while managing the table of devices.

Also, when managing the network interactions map, you can add to a group multiple known devices on the network interactions map. You can select component servers either individually or as part of collapsed groups that include the required devices. When you select a collapsed group, all devices in child groups at all nesting levels also end up in the selection.

To add multiple devices to a group when managing the table:

  1. Use the web interface to connect to the Central Node with the Senior security officer role.
  2. Select the Assets section.
  3. On the Devices tab, select the devices that you want to add to a group.
  4. Right-click to open the context menu.
  5. In the context menu, select Group management → Move to group.

    The Select group in tree window appears.

  6. In the device group tree, select the relevant group.

    If the relevant group is not in the tree, you can add it in the currently displayed Select group in tree window.

  7. Click Select.

    The path to the selected group appears in the Group column.

To add multiple devices to a group when managing the network interactions map:

  1. Use the web interface to connect to the Central Node with the Security officer or Senior security officer role.
  2. In the Network map section, on the Network interactions map tab, select the relevant component servers and/or collapsed groups.

    To select multiple component servers and/or groups, do one of the following:

    • Press and hold the SHIFT key, then use the mouse to select a rectangular area with the objects that you want to select.
    • Press and hold the CTRL key and click every object that you want to select.
  3. Right-click to open the context menu.
  4. In the context menu, select Move to group.

    The Select group in tree window appears.

  5. In the device group tree, select the relevant group.

    If the relevant group is not in the tree, you can add it in the currently displayed Select group in tree window.

  6. Click Select.

    The selected component servers are displayed inside the selected group.

Page top
[Topic 283666]

Removing a device from a group

To remove an individual device from a group when managing the table:

  1. Use the web interface to connect to the Central Node with the Senior security officer role.
  2. Select the device in the Assets section on the Devices tab or in the Network map section.

    In the Network map section, you can select devices to remove from a group on the network interactions map as well as the topology map.

    The details area is displayed in the right part of the web interface window.

  3. Click Edit.
  4. In the details area, go to the Settings tab.
  5. In the Group field, delete the path to the group by clicking the X icon for clearing or deleting objects. icon in the field (the icon is displayed if a group is defined).
  6. Click Save.

    This button is unavailable if the device settings do not contain all the required information or if some of the specified settings are invalid. Tabs with settings that require a correct value is marked with the Red dot icon. icon.

After saving the changes for the device, its Group value is cleared and the device is assigned to the root level of the group tree.

Page top
[Topic 283671]

Removing multiple devices from groups

You can remove multiple devices from groups while managing the table of devices. Devices selected for removal from groups can belong to the same group or to different groups.

Also, when managing the network interactions map, you can exclude from groups multiple known devices on the network interactions map. You can select component servers either individually or as part of collapsed groups that include the required devices. When you select a collapsed group, all devices in child groups at all nesting levels also end up in the selection.

To remove multiple devices from groups when managing the table:

  1. Use the web interface to connect to the Central Node with the Senior security officer role.
  2. Select the Assets section.
  3. On the Devices tab, select the devices that you want to remove from groups.
  4. Right-click to open the context menu.
  5. In the context menu, select Group management → Remove from groups.

    This opens a confirmation prompt window.

  6. In the prompt window, confirm the removal of devices from groups.

For all selected devices, the Group value is cleared and these devices are assigned to the root level of the group tree.

To remove multiple devices from groups when managing the network interactions map:

  1. Use the web interface to connect to the Central Node with the Security officer or Senior security officer role.
  2. In the Network map section, on the Network interactions map tab, select the component servers in expanded groups and/or collapsed groups.

    To select multiple component servers and/or groups, do one of the following:

    • Press and hold the SHIFT key, then use the mouse to select a rectangular area with the objects that you want to select.
    • Press and hold the CTRL key and click every object that you want to select.
  3. Right-click to open the context menu.
  4. In the context menu, select Remove from group.

    This opens a confirmation prompt window.

  5. In the prompt window, confirm the removal of devices from groups.

For all selected devices, the Group value is cleared and these devices are displayed outside of groups.

Page top
[Topic 283679]