Node Group Details

In Genian NAC, node groups can be categorized into two types: Node Policy-only Node Groups (Policy Groups) and General Node Groups (Status Groups).

In general, node groups are used when establishing policies and can be applied in node policies and control policies.

Checking Conditions for Creating Node Policy-only Node Groups

Node policy-only node groups are based on node-related information such as node type, IP/MAC address, user information, and authentication.

These node groups can be used in node policies.

Item Description
IPv6 Address Creates a group based on the node’s IPv6 address.
IP Management Creates a group based on IP management policies used in NAC.
IP Address Creates a group based on the node’s IPv4 address.
MAC + IP Address Creates a group based on the node’s IPv4 address and MAC address.
MAC Address Creates a group based on the node’s MAC address.
Node Type Creates a group based on the node type classified by NAC.
Registration Status Creates a group based on whether the node is registered on the policy server.
Registration Date Creates a group based on the registration time of the node in NAC.
Sensor Creates a group based on network sensors and registered nodes on those sensors.
Time Creates a group based on current time using time objects.
Agent Creates a group based on the installation and operation status of the NAC agent.
Authenticated User Creates a group based on authenticated users when NAC's user authentication is in use.
Device Owner Creates a group based on the device owner information set on the node.
Policy Group Creates a group that includes another policy group. (Only one level of nesting is allowed)
Tag Creates a group based on tag information assigned to nodes.

Checking Conditions for Creating General Node Groups

General node groups are based on node status and results derived from various related conditions.

Note

General node groups include all conditions of policy-only node groups, but cannot be used in node policies.

Category Description Items
Policy Creates a group based on policies defined in NAC. IP Management, Node Group, Node Policy, Authenticated User, Tag, Hostname Restriction
Sensor Info Creates a group based on information collected from network sensors. Node Type, Service, Sensor, Up/Down Status, Open Ports, OS Type
Traffic, Platform, Host/Domain Name
Agent Info Creates a group based on information collected from agents. USB Device Info, WMI Data Collection, Uptime, Account Password Verification, Network, AV Info
Software, System, System User Account, Agent Status, Agent Actions, OS Updates
Device Info Creates a group based on information set on devices. Device Name, Description, Manufacturing Date, Purchase Source, Start/End of Lifespan
Serial Number, Purchase Cost, Responsible Person/Department, Memo
Additional Info Creates a group based on GPI integration and additional field values. GPI Score, GPI Inspection Result
Uncategorized Creates a group based on conditions not classified into specific types. Registration Status, IPv6 Address, IP Address, MAC + IP, MAC Address, NAT,Registration Date, Consent
Name/Description, Built-in Wireless, Device Owner, Connected AP/Device/Port, Platform CVEs