Specifications

Groups &Devices
This panel shows the device tree for devices modeled in the Console database. You can expand
branches of the tree to select Devices/Device Groups to be searched when Dragon notifies ASM of a
threat. After making a selection, click Include to designate your selection(s) as being included in the
search scope or click Exclude to designate your selection(s) as being specifically excluded in the
search scope.
You can repeatedly select devices/device groups individually and click Include/Exclude or use
multiple selection techniques (Control−click or Shift−Click) to select or de−select multiple
Devices/Device Groups in a single operation.
NOTE: When there are devices on your network that do not support layer 3,
you should include routers in the list of targets to allow Compass to
use its IP to MAC address resolution feature to locate the end station.
This includes the following devices:
Matrix C1 Matrix E1
(1G6xx Series)
Matrix E5
Matrix V Series SS9000 Vertical Horizon
1st Generation 1Hxxx Series
Selected Groups and Devices
This panel lists the devices/device groups selected from the Groups &Devices panel. The Filter
column in the table indicates whether the device(s)/device group(s) can be included or excluded. The
Device Group Path column shows the specific IP address and branch of the tree for selected
devices/device groups.
Devices/device groups designated as Excluded are excluded from the search scope, regardless of any
Include settings. For example, if a particular device is set to Excluded and the same device is a
member of a device group that is set to Included, then the excluded device will not be searched.
You can further refine your search scope by selecting either Any of the Included Groups or All of
the Included Groups.
Any of the Included Groups creates an OR condition such that if a selected device (not
specifically excluded) is a member of any of the selected groups, then it will be included in
the search scope and appear in the Resulting Device/Device Group table. For example,
selecting a specific Vertical Horizon device that is not in subnet 172.18.19.xx together with
the Vertical Horizon and IP Subnet 172.18,19.xx Device Groups and clicking Any of the
Included Groups includes all Vertical Horizon devices (including the individual VH device)
and all devices from the 172.18,19.xx subnet.
•
All of the Included Groups creates an AND condition. When selected, only devices that are
members of all of the selected device groups will be included in the search scope. This
selection is useful when you want to select all of a particular device type, but only in a
specific location−−for example, all the routers in a particular building. When a device type
(Routers) and a location group (Building2) are both selected, then only the devices contained
•
Automated Security Manager Help
Create/Edit Search Scope 164