Specifications

search scope or click Exclude to designate your selection(s) as being specifically excluded in the
search scope.
You can repeatedly select devices/device groups individually and click Include/Exclude or use
multiple selection techniques (Control−click or Shift−Click) to select or de−select multiple
Devices/Device Groups in a single operation.
NOTE: When there are devices on your network that do not support layer 3,
you should include routers in the list of targets to allow ASM to use
its IP to MAC address resolution feature to locate the end station.
This includes the following devices:
Matrix C1 Matrix E1
(1G6xx Series)
Matrix E5
Matrix V Series SS9000 Vertical Horizon
1
st
Generation 1Hxxx Series
ASM resolves IP addresses to MAC addresses using information
from router MIBs (ipNetToMediaTable, ipNetToMediaTable,
ipCidrRouteTable and ipRouteTable), but only if devices that can be
modeled as a switch or a router are created in the Console database
using the router's IP address. ASM cannot query information from the
router MIBs unless devices are created using an IP address for the
router interface.
Selected Groups and Devices
This panel lists the devices/device groups selected from the Groups & Devices panel. The Filter
column in the table indicates whether the device(s)/device group(s) can be included or excluded. The
Device Group Path column shows the specific IP address and branch of the tree for selected
devices/device groups.
Devices/device groups designated as Excluded are excluded from the search scope, regardless of any
Include settings. For example, if a particular device is set to Excluded and the same device is a
member of a device group that is set to Included, then the excluded device will not be searched.
You can further refine your search scope by selecting either Any of the Included Groups or All of
the Included Groups.
Any of the Included Groups creates an OR condition such that if a selected device (not
specifically excluded) is a member of any of the selected groups, then it will be included in
the search scope and appear in the Resulting Device/Device Group table. For example,
selecting a specific Vertical Horizon device that is not in subnet 172.18.19.xx together with
the Vertical Horizon and IP Subnet 172.18,19.xx Device Groups and clicking Any of the
Included Groups includes all Vertical Horizon devices (including the individual VH device)
and all devices from the 172.18,19.xx subnet.
•
All of the Included Groups creates an AND condition. When selected, only devices that are
members of all of the selected device groups will be included in the search scope. This
selection is useful when you want to select all of a particular device type, but only in a
•
Automated Security Manager Help
Basic Search Scope 113