In BIG-IQ Security, groups are:
When you have many BIG-IP devices to manage, you can group devices, which helps you visualize and manage large numbers of devices.
You can use the panel filtering options to show the devices you are interested in. Then, you can save this group with a name and description. Subsequently, you can select this group or any group saved earlier. You can easily delete other user-created groups.
You can also filter the Devices panel (devices and groups) by typing text in the Filter field and pressing the Enter key. Clear the filter by clicking the X to the right of the text in the gray box under the filter.
System-defined groups (the Firewall Group and cluster groups) do not allow users to edit their memberships directly. Devices are added to these groups through the discovery process and deleted from this groups using the Remove button on the device's Properties panel.
You can arrange user-defined groups in a hierarchy of groups and subgroups.
System-defined groups always appear at the top of the hierarchy (root) and cannot contain child groups.
|Group Name||Name of the group. Must be unique across all groups. Give the group a name that will assist you in remembering the group's purpose, managing the group, or identify the group.|
|Description||Optional description for the group. Descriptions can contain useful information about groups.|
|Parent Group||>Accept the default (root) or select another group from the dropdown list to reside at the top of the group hierarchy.|
|Available Devices||Begin typing to see the list of available devices. Select an available device and click Add Device to add a device to the table.|
After adding a BIG-IP device to a pre-existing group, you can manage the group through the Group Properties screen. This means you can change the group hierarchy, add or remove devices from groups, delete groups, and modify group descriptions.
From the Group Properties screen, you can change the hierarchy of groups and subgroups through the Parent Group list.
To change group hierarchy:
System-defined groups (the Firewall Group and cluster groups) do not allow users to edit memberships directly. Devices are added to these groups through the discovery process and deleted from these groups using the Remove button on the device's Properties screen.
To add a device to a group:
To remove a device from a group:
To delete a group:
This action permanently removes the group from BIG-IQ Network Security.
To modify the group description, type a description in the Description field, or modify the existing description and click Save. The description could be written to help you remember the purpose of the group, or it could contain other useful information about the group.