Smart Group Selection Order

To create a Smart Group, you can use any combination of device, products and advisories conditions. However, the order in which conditions are evaluated is this: device conditions filter out the devices on which the following conditions are applied; products conditions filter out devices without those products installed; advisory conditions filter out products and devices without those conditions. Following are some sample Smart Group selections.

•

Only device conditions—Select those devices and show all products and advisories detected on those devices

•

Only product conditions—Select the devices that have the products installed and show devices and advisories for those products

•

Only advisory conditions—Select the devices and the products that have those advisories associated

•

All types of conditions—Select the devices; then select devices with the product conditions and eliminate devices or products that do not have the advisory conditions. This selection order ensures that a group with the conditions “Windows platform, Python product installed, Highly and extremely critical advisories” show devices that have a Python product with highly critical advisories. This selection order also ensures you do not include devices with critical advisories on products that are not Python.

•

Product secure type—Is context dependent on the list of devices; a product can be insecure on one device and secure on other devices (Example: Windows may be insecure depending on the KBs installed on the device). For example, if you create a Smart Group “Devices from AD group “NorthAmerica” and insecure products”, you might not get “Windows 8” as insecure in your Smart Group list, although you see it as insecure in the full product list, since Windows 8 is secure on all devices in your Active Directory (AD).