Creating Automatic Inclusion Rules for Monitoring Policies

Creating Automatic Inclusion Rules for Monitoring Policies

You can create automatic inclusion rules to define the criteria a device must meet to be monitored by the monitoring policy. Devices that match the inclusion rules are automatically monitored. If a device no longer meets the rule criteria, it is automatically removed from monitoring. Automatic inclusion rules only go into effect when you add the monitoring policy to a service, which is then applied to a site or group either directly or as part of a service plan. You can also associate the monitoring policy with a site or service group. For more information on creating and managing service plans, seeย Creating Service Plans.

Rules are created by first defining AND and OR statements, then by adding rules to the statements. For example, if you are creating a rule to automatically monitor all devices running on a Windows 7 operating system, in the default AND group, you would specify that the OS Name contains "Windows 7".

To create a rule that specifies that the device must either have a Windows 7 orย Windows 2008 operating system, you would change the AND group to an OR group, and then add a second rule that specifies that the OS Name contains "Windows 2008".

Setting up Automatic Application Rules

https://campus.barracuda.com/to/17W3

(13 minutes)
Planning out automatic inclusion rules

Creating automatic inclusion rules will usually be simple, but because you can put together very sophisticated rules, it's best to come up with a statement about the rule before you get started. Here are some example rule statements:

  • If the device must be a firewall, the rule statement would simply be: firewall.

  • If the chassis type must be a laptop, and the operating system must be Windows 7: (Chassis type is laptop) AND (OS is Windows 7).

  • The network service must be HTTP or HTTPS: (HTTP) OR (HTTPS).

  • The domain role must be a member workstation or a member server, and the operating system must be Windows 7 or Windows 2008: (Member Workstation or Member Server) AND (Windows 7 or Windows 2008).

To create an automatic inclusion rule for a monitoring policy
  1. In Service Center, clickย Configurationย >ย Policiesย >ย Monitoring.

  2. Click the name of the monitoring policy to modify.

  3. Click theย Automatic Applicationย tab.

  4. Create the conditional statements. Seeย Creating condition statements forย a monitoring policy automatic inclusion rule below.

  5. Create the inclusion criteria. See Creating inclusion criteria for a monitoring policy automatic inclusion rule below.

  6. Preview the rule.

Creating condition statements for a monitoring policy automatic inclusion rule

Set up the conditional structure of the rule by adding AND or OR statements. By default, rules include a single AND statement.

  • Set up the conditional statements by doing any of the following:

    • To create a single AND statement to which you can add one or multiple rules, do nothing.

    • To create a single OR statement, right-click the existing AND statement and select Modify. From the Type list, select Or.

    • To add an OR statement below the existing AND statement, select the AND statement and click Add. From the Type list, select Or.

Creating inclusion criteria for a monitoring policy automatic inclusion rule

For each AND or OR statement, you must define at least one inclusion criteria.

  1. Select the AND or OR statement to which you want to add inclusion criteria.

  2. Clickย Add.

  3. From theย Typeย list, selectย Rule.

  4. From theย Ruleย list, select one of the following:
    Chassis Typeย Filter devices according to chassis type, such as laptop, desktop, notebook, etc. Select eitherย Equalsย orย Not Equalย from theย Operatorย list, and select a chassis type from theย Valueย list.

    Device MAC Addressย Filter devices by the MAC address. Select eitherย Equals,ย Contains, orย Starts Withย from theย Operatorย list, and type the MAC address in theย Valueย box.

    Deviceย Modelย Filter devices by providing the device model. Select eitherย Equals , Not Equal,ย  Contains ,ย  Not Contain , orย  Starts Withย from theย  Operatorย list and type the device model name in theย  Valueย box.

    Device Role Category Filters devices by device role category. As a best practice, use this rule when you are applying service plans to shared site groups; the pre-built shared site groups in Barracuda RMM are designed to be applied to the device roles defined in this rule. Select Equalsย or Not Equal from the Operator list, and then select Network Device, Unknown, Windows Server, or Windows Workstation.

    Hardware Typeย Filters devices according to hardware type, including desktop, laptop, printer, rack mount, and others. From theย Valueย list, select the hardware type.

    Has Warranty Informationย Filter devices by whether warranty information exists. Searches for devices with both custom and vendor warranties. Supported vendors include Acer, Compaq, Dell, Gateway, Hewlett-Packard, HP, IBM, Lenovo, and Toshiba. Selecting this option from theย Ruleย list includes all devices with warranty information.

    Installedย Memoryย (inย GB)ย Filter devices by the installed memory. Select eitherย Greater Thanย orย Less Thanย from theย Operatorย list, then type a number in theย Valueย box, in GBs.

    IP Addressย Filter devices by the IP address. Select eitherย Equals,ย Not Equal,ย Greater Than,ย Less Than,ย Containsย orย Starts Withย from theย Operatorย list, then type an IP address in theย Valueย box.

    Is a Printerย Filter devices to include printers. Selecting this option from theย Ruleย list includes all printers.

    Isย aย Virtualย Machineย Filter devices to include virtual machines. Selecting this option from theย Ruleย list includes all virtual machines.

    Logical Drive Size (GB)ย Filter devices by the logical drive size. Select eitherย Greater Thanย orย Less Thanย from theย Operatorย list, then type a number in theย Valueย box, in GBs.

    Manufacturerย Filter devices by the manufacturer. Selectย Equals,ย Not Equal,ย Contains,ย Not Contain, orย Starts Withย from theย Operatorย list, then type a manufacturer name in theย Valueย box.

    Network Roleย Filter devices by the network role, such as firewall, router, etc. Select a network role from theย Valueย list.

    Network Serviceย Filter devices by standard network service ports, including commonly-used services such as HTTP, SMTP, and POP3. Custom ports for network services are not filtered. Select a network service from theย Valueย list.

    OS Familyย Filters devices by OS family, for example,ย Android, iOS, Linux/ Unix, and Windows. From theย Valueย list, select an OS family.

    OS Nameย Filter devices by the operating system name, for example,ย Windows Server 2008 Standard. Selectย Equals,ย Not Equal,ย Contains,ย Not

    Contain, orย Starts Withย from theย Operatorย list, then type an operating system name in theย Valueย box.

    OS SKUย Filter devices by their unique operating system SKU (Stock Keeping Unit). For example, Windows 7 has several SKUs, including Home Premium, Professional, Home Basic, and Enterprise. Select eitherย Equalsย orย Not Equalย from the

    Operatorย list, then select a SKU from the Value list.
    The OS SKU rule doesn't apply to Windows 2003 and XP operating systems.

    OS Version ย Filter devices by the operating system version, which you can determine by executing the winver command. For example, for the Windows 7 Enterprise operating system, the OS build version is 7601. Select eitherย  Equals , Not Equal, orย  Starts ย  With ย from theย  Operator ย list, then type an operating system version in theย  Value ย box.

    Responds to SNMPย Filter devices by whether they respond to Simple Network Management Protocol (SNMP) monitors. From theย Valueย list, selectย Trueย to include devices that respond to SNMP monitors, orย Falseย to include devices that do not respond.

    Respondsย toย Specificย OIDย Filter devices to include those that respond to a specific SNMP object identifier (OID). From theย Valueย list, select an OID type, such as Dell Server or HP Switch.

    Responds to SSHย Filters devices by whether they respond to Secure Shell (SSH) monitors. From theย Valueย list, selectย Trueย to include devices that respond to SSH monitors, orย Falseย to include devices that do not respond.

    Responds to WMIย Filters devices by whether they are WMI enabled. From theย Valueย list, selectย Trueย to include devices are WMI enabled, orย Falseย to include devices that are not.

    Responds to WS-MANย Filter devices by whether WS-MAN is enabled, which is an option for WMI connectivity. Selectย Trueย orย Falseย from theย Valueย list.

    SNMP sysDescย Filter devices by the SNMP system description. For example, to include Apple macOSย devices, you could enter "Darwin". Select eitherย Equals,ย Not Equal,ย Contains,ย Not Contain, orย Starts Withย from theย Operatorย list, then type an SNMP system description in theย Valueย box.

    SNMP sysObjectIDย Filter devices by the SNMP system object ID. For example, Cisco ASA series devices each have unique sysObjectIDs. To include Cisco ASA 5505 devices, enter the sysObjectID for this device type (1.3.6.1.4.1.9.1.745). Select eitherย Equals,ย Not Equal,ย Contains,ย Not Contain, orย Starts Withย from theย Operatorย list, then type an SNMP sysObjectID in theย Valueย box.

    Software - Mac and Software - Windowsย Filter devices by the Mac or Windows applications that are installed. You can filter by software name, and optionally you can also filter by the software version.

    1. From theย Operatorย list, select eitherย Existsย orย Does Notย  Exist.

    2. Underย Softwareย  Name, select an operator from theย Operatorย list and type the software name in theย Valueย box.

    3. To further filter by software version, select theย Include Software Versionย check box. From theย Operatorย list that appears, select an operator and type a version number in theย Valueย box.

    System Roleย Filter devices by system role, for example,ย File Server or Routing Service. Select Equals or Not Equal from the Operator list, and then selectย a system role from theย Valueย list.
    Windowsย Serviceย Nameย Filter devices by the Windows Service Name. To determine the Windows Service Name, view the device's Properties Page. Select eitherย Equals,ย Not Equal,ย Contains,ย Not Contain, orย Starts Withย from the Operatorย list, then type a Windows Service Name in theย Valueย box.

  5. Domain Roleย Filter devices by the domain role. Select either Equals or Not Equal from theย Operatorย list and select a domain role from theย Valueย list, such asย Member Workstationย orย Primary Domain Controller.

  6. Clickย Add.

  7. Clickย Save.


We value your feedback.
If you have questions, suggestions, or feedback on our documentation, contact the Campus Product Documentation team.
For general product inquiries or technical support, please contact the global Barracuda Support team.