Group tree

The group tree enables you to statically arrange the computers on the network in the groups that you choose.

To access the group tree, follow the steps below:

• Click the folder icon from the left panel.

• By clicking the different branches in the tree, the panel on the right is updated, presenting all the computers in the selected group and its subgroups.

About groups

A group contains computers manually assigned by the administrator. The group tree enables you to create a structure with a number of levels comprising groups, subgroups, and computers.

The maximum number of levels in a group is 10.

Group types

Group type	Description
Root group	This is the top group under which all other groups reside.
Native groups	These are Panda Adaptive Defense 360 groups, some of which are predefined. These groups support all operations (such as move, rename, or delete) and can contain other groups and computers.
IP-based groups	Native group with associated IPs or IP ranges to speed up integration of new computers in the security service.
Active Directory groups	These groups replicate your Active Directory structure. These groups do not support some operations. They can contain other Active Directory groups and computers..
Active Directory root group	This group contains all Active Directory domains configured on the organization’s network.. It contains Active Directory domain groups.
Active Directory domain group	These groups are Active Directory branches that represent domains. They contain other Active Directory domain groups, Active Directory groups, and computers.
Group types in Panda Adaptive Defense 360

The size of the organization, the uniformity of the managed computers, and the presence or absence of an Active Directory server on the company network determines the structure of the group tree. The group structure may vary from a flat tree with a single level for the simplest cases, to a complex structure with several levels for large networks made up of highly heterogeneous computers.

Unlike filters, a computer can only belong to a single group.

Active Directory groups

For organizations with an Active Directory server, Panda Adaptive Defense 360 can automatically replicate the Active Directory structure on the My Organization tab. This works as follows: The Panda agent installed on each computer reports the Active Directory group it belongs to to the web console and, as agents are deployed, the tree is populated with the various organizational units. This way, the branch shows a structure familiar to you, helping you find and manage your computers faster.

To make sure the structure is consistent between Active Directory and the My Organization tab, you cannot modify Active Directory groups in Panda Adaptive Defense 360. Panda Adaptive Defense 360 automatically updates Active Directory groups within one hour when you make changes to your Active Directory structure.

In Panda Adaptive Defense 360, if you move a computer from an Active Directory group to a native group or to the root group, the synchronization relationship with Active Directory breaks. Any changes you make to Active Directory groups that affect the moved computer are not reflected in Panda Adaptive Defense 360.

For information on how to reestablish the synchronization relationship between Active Directory and Panda Adaptive Defense 360, see Returning multiple computers to their Active Directory group.

Creating and organizing groups

The actions you can take on groups are available through the pop-up menu displayed when clicking the context menu for the relevant branch in the group tree. The menu displayed shows the actions available for that particular branch.

Creating a group

• Click the context menu of the parent group to which the new group will belong, and click Add group.

• Type the name of the group in the Name text box and click the Add button.

You cannot create Active Directory groups from the group tree. The tree replicates the groups and organizational units that already exist on your Active Directory server.

To automatically assign computers to a group when you install the Panda Adaptive Defense 360 agent, you can specify the IP addresses or an IP address range for the group:

• Click the Add IP-based automatic assignment rules link. A text box is displayed for you to type the IP addresses of the computers to move to the group.

• You can enter individual IP addresses separated by commas, or IP address ranges separated by a dash.

Computers are added to the group when you install the Panda Adaptive Defense 360 agent. If the computer IP address changes, the computer remains in the original group.

Deleting groups

Click the context menu of the group you want to delete. To delete a group, it must be empty. If the group contains subgroups or computers, an error message appears.

You cannot delete the All group.

To delete empty Active Directory groups included in another group, click the group’s context menu and select Delete empty groups.

Moving groups

• Click the context menu of the group you want to move.

• Click Move. A pop-up window appears with the target group tree.

• Select the target group and click OK.

You cannot move the All group or any Active Directory groups.

Renaming groups

• Click the context menu of the group you want to rename.

• Click Change name.

• Type a new name.

You cannot rename the All group or any Active Directory groups.

Importing IP-based assignment rules to existing groups

Follow the steps below to add IP addresses to an existing native group:

• Select the context menu of a native group other than the Al' group and select the Import IP-based assignment rules option. A window opens for you to drag a file with the IP addresses to add.

• The import file must contain one or more rows of text with the following format:

  • For individual IP addresses, include one address per row. For example:

    • .\Group\Group\Group (Tab) IP address

  • For IP address ranges, include one range per row. For example:

    • .\Group\Group\Group (Tab) Start IP-End IP

  • Panda Adaptive Defense 360 interprets all specified paths as part of the selected group.

  • If the groups indicated in the file do not already exist, Panda Adaptive Defense 360 creates them and assigns the specified IP addresses to them.

• Click Import. The IP addresses are assigned to the groups specified in the file. The icons on the My Organization tab update to reflect any changes to group type.

When you import a file with new group-IP pairs, the solution deletes all IP addresses previously assigned to an IP-based group.

When the process is complete, as new computers are integrated into Panda Adaptive Defense 360, they move to the relevant groups based on their IP address.

Exporting IP-based assignment rules

To export a file with IP-based assignment rules, follow the steps below:

• Click the context menu of a group from which you want to export IP-based rules, and select the option Export IP-based assignment rules. A CSV file downloads with the IP-based assignment rules defined for the group and its subgroups.

• The CSV file has the format specified in section Importing IP-based assignment rules to existing groups.

Moving computers from one group to another

You have several options to move one or more computers to a group:

Moving groups of computers to groups

• Select the group All in order to list all managed computers, or use the search tool to locate a specific group of computers you want to move.

• In the list of computers, select the checkboxes next to the computers you want to move.

• Click the icon to the right of the search bar. A drop-down menu appears with the option Move to. Click it to show the target group tree.

• Select the target group you want to move the computers to.

Moving a single computer to a group

There are three ways to move a single computer to a group:

• Follow the steps described above for moving groups of computers, but simply select a single computer.

• Find the computer that you want to move and click the menu icon to its right.

• From the details page of the computer that you want to move:

  • From the panel with the list of computers, click the computer you want to move in order to display its details.

  • Find the Group property and click Change. A window opens with the target group tree.

  • Select the target group to move the computer to. Click OK.

Moving computers from an Active Directory group

A computer that belongs to an Active Directory group is synchronized with your Active Directory server and cannot be moved to another Active Directory group through Panda Adaptive Defense 360. To do this, you must move the computer in Active Directory and then wait up to one hour for Panda Adaptive Defense 360 to synchronize the change. However, computers belonging to an Active Directory group can be moved to a native group.

If you move a computer from an Active Directory group to a native group, any changes made to the company’s Active Directory groups will not be reflected in the web console. See Active Directory groups for more information.

Moving computers to an Active Directory group

You cannot move a computer from a native group to a specific Active Directory group. You can only return a computer to the Active Directory group that it previously belonged to. To do this, click the computer’s context menu and select Move to Active Directory path.

Returning multiple computers to their Active Directory group

To return multiple computers to their original Active Directory group, click the context menu of an Active Directory group and select Retrieve all computer residing on this Active Directory branch. All computers in the group that you moved to other groups return to their original Active Directory group.

Filtering results by groups

The feature for filtering results by groups displays in the console only the information generated by the computers on the network that belong to the groups selected by the administrator. This is a quick way to establish a filter that affects the entire console (lists, dashboards, and settings) and helps to highlight data of interest to the administrator.

Configuring the filter by groups

To configure the filtering of results by groups, follow the steps below:

• Click the relevant button from the top menu. A window with the group tree is displayed.

• Select the groups you want to see from the computer tree and click OK.

The console only displays information for the computers from the selected groups.

Filters do not affect task visibility, email alerts, or scheduled executive reports.

Filtering groups

In very large IT infrastructures, the group tree may contain a large number of nodes distributed at multiple levels, making it difficult to find specific groups. To filter the group tree and show only those groups that match the characters entered:

• Click the icon at the top of the group tree. A text box appears.

• Type the letters of the name of the group you want to find. All groups whose name starts with, ends with, or contains the character string entered are shown.

• After you have completed your search, select the group you are interested in and click the icon to show the full group tree again, maintaining your selection.