Kaspersky Anti Targeted Attack Platform

Automatically grouping devices based on a criterion

This section contains instructions on how to automatically group devices based on a criterion. You can automatically group devices in the device group tree based on one of the following criteria:

  • IP addresses belonging to subnets that are known to the application
  • Device categories
  • Device vendors

Only users with the Senior security officer role can automatically group devices.

In this section

Automatically grouping devices based on a criterion, starting from the root of the group tree

Automatically grouping devices in a selected device group

Page top
[Topic 212946]

Automatically grouping devices based on a criterion, starting from the root of the group tree

To automatically group devices based on a criterion, starting from the root of the group tree:

  1. Use the web interface to connect to the Central Node with the Senior security officer role.
  2. In the Network map section, on the Network interactions map tab, click one of the following buttons for selecting a grouping criterion in the toolbar in the left part of the network interactions map display area:
    • Icon representing a network structure of nodes. to group devices by subnet.
    • Icon representing devices of various types. to group devices by category.
    • Icon representing a brand label. to group devices by vendor.

    This opens a prompt window in which you can select a grouping option.

  3. To group devices by category and vendor based on address spaces, in the prompt window, select the Take into account the address spaces check box.
  4. Click on one of the following buttons, depending on the what you want to do:
    • To group devices by subnets, click Group.
    • To group devices by category and vendor based on address spaces in all groups of the device group tree, click With child groups.
    • To group devices by category and vendor based on address spaces only at the top level of the device group tree hierarchy, click Selected only.

The application identifies devices that match the selected grouping criterion, creates groups for these devices, and arranges the devices into these groups.

Page top
[Topic 283658]

Automatically grouping devices in a selected device group

To automatically group devices in a selected device group:

  1. Use the web interface to connect to the Central Node with the Senior security officer role.
  2. In the Network map section, on the Network interactions map tab, select the group in which you want to automatically group devices.
  3. Right-click to open the context menu.
  4. In the context menu, select one of the following commands:
    • Group by subnet.
    • Group by category.
    • Group by vendor.

    This opens a prompt window in which you can select a grouping option.

  5. To group devices by category and vendor based on address spaces, in the prompt window, select the Take into account the address spaces check box.
  6. In the prompt window, click on one of the following buttons, depending on the what you want to do:
    • To group devices by subnets, click Group.
    • If you want to group devices by category or vendor in all child groups of the selected group, click With child groups.
    • If you want to group devices by category or vendor only in the selected group, click Selected only.

The application identifies devices that match the selected grouping criterion, creates groups for these devices and arranges devices into these groups (devices in other groups are not affected).

Page top

[Topic 283661]