Object group🔗

Introduction to Object group

This section provides information about Object groups, which are used to group objects of the same kind in the NACVIEW system so that they can be managed and referenced together. An Object group is a term related to a named collection of objects, such as endpoint devices, identities, MAC addresses or IP addresses. In addition to its name, an object group includes: an optional description, enabled status, a purpose (the kind of objects it contains), a type, and the associated identities, endpoint devices, MAC addresses, network devices, ports, and administration groups. All this information is important in the process of deciding how groups of devices and users are treated by access policies, e.g. which of them are placed in quarantine or granted access to a given network.

System context: Object groups are created individually (Add) or automatically, e.g. during an import (such groups have the description Auto-created during import). By default, NACVIEW contains built-in object groups used for quarantine: Quarantine Endpoint Devices, Quarantine Identities, Quarantine MAC Addresses and Voucher Identities. Built-in object groups cannot be deleted. The purpose of each group (Endpoint device, Identity, MAC address, Network device, Port or IP address) determines which kind of objects can be added to it.

Operational Example: An administrator creates an object group named Printers with the purpose MAC address and adds to it the MAC addresses of all network printers. The group is then used in an access policy, so every printer connecting to the network is automatically assigned to the printer VLAN, regardless of the switch port it is connected to.

Toolbar🔗

Add button is used to manually add a single new object group.

Group actions button is used to perform an action on multiple selected object groups at once. Object groups can be selected by holding the Ctrl or Shift key while clicking. The available actions are: Edit selected, Activate, Deactivate, and Delete.

The object group details panel🔗

The object group details panel opens when a specific object group is selected from the list (Details). It displays all information about the selected object group in one place, in read-only mode. The top of the panel contains action buttons for the selected object group (Edit, Archive), while below them the full set of the group’s attributes is shown, including creation data (Created by), Name, Description, Enabled status, Purpose, and Type.

Edit button is used to edit the attributes of the selected object group.

Archive button is used to display the archive records related to the selected object group, showing when each record was created, by whom, from which IP address, and the object name and type.

Panels🔗

The following expandable panels are available at the bottom of the right-hand side of the details view:

Identities - shows the identities (users) that belong to this object group.

Endpoint devices - shows the endpoint devices that belong to this object group.

MAC addresses - shows the MAC addresses that belong to this object group.

Network devices - shows the network devices associated with this object group.

Ports - shows the network device ports associated with this object group.

Administration groups - shows the administration groups allowed to manage this object group.

Views & Actions

• Object Groups List

• Object group Show

• Add object group Form

• Edit object group Form