Check Point HARMONY R81 - Using a Computer Group in a User-Based Policy

Virtual Groups in Policy Rules
R81 Harmony Endpoint Server Administration Guide|155
n
Enter a name for the group.
n
Optional: Enter a Comment.
n
Select Virtual Group or Computer Group.
3. Click Next.
4. In the Select Entities window, select the members of the group.
5. Click Finish.
To add computers and users from Active Directory to a Virtual Group:
1. Right-click an OU on the Directories branch of the Users and Computers tree.
2. Select Add content to Virtual Group.
3. Select a Virtual Group and click OK.
All users and computers in the specified OU are added to the Virtual Group.
If select one of the default Virtual Groups, only those users and computers applicable to
that group are added. For example, if you select the All Laptops Virtual Group, only
laptops computers and their users are added to the group.
To copy a user or computer to another virtual group:
1. Right-click the user, computer or Active Directory group.
2. Select Add to Virtual Group.
3. Select the destination virtual group.
The source object becomes a member of the destination group while remaining a member of
the source group.
To remove a user or computer from a virtual group:
1. Right-click the user or computer.
2. Select Remove from Virtual Group.
Using a Computer Group in a User-Based Policy
You can assign a rule to a Virtual Group, as you can for any other entity.
This example shows how to use a Computer Group in the Media Encryption & Port Protection
Policy, which is user-based.
Best Practice - In a component policy that is user-based, put computer group rules above user
rules in the "more rule(s)" section
Read the comments in the rules.