Custom Sites How do I assign for users that roam from site to site

(imported topic written by russwm91)

Hello everybody

I need some advice on custom site and how I have set them up.

I made a custom site for each company we owned. I created automatic groups that capture almost all of the computer per company. I assigned a policy that runs all the time to include this custom site for the computer in the auto groups.

My concerned is how do I keep laptops using this site custom site. Laptops roam from coffee shops, to working at home to going to different locations even different companies. I’m worried if I have a user who is in company x and get placed in a auto group for company x then gets a custom site assigned to his laptop for X. If this user next week goes in to Corp HQ with owns company X,Y,and Z they will now have the custom site for that location. I also have Trend AV and have policies running for real time and on-demand settings for each company. Will a user that moves from one location to another be getting a different policy assigned to them. Is there a better way to handle the unique issues that you have with laptop users that roam.

BTW I do have a DMZ relay for my laptop users also in place.

Thanks,

Russ

(imported comment written by BenKus)

Hey Russ,

So are your automatic group definitions based on subnet locations?

Ben

(imported comment written by russwm91)

Yes there mainly based on relevancy around a certain subnet network range for each site location which captures the desktops and servers. I know this is a challenge when your dealing with Laptops to capture where they are since IP changes as they move from different locations. I do have a DMZ relay that allows me to have some insite to roaming users on my network.

(imported comment written by JackCoates91)

Hi russwm,

it sounds to me like you need to think of two types of policies… first the type of policy that matters for mobile computers versus static computers, second the type of policy that matters for company X versus company Y. For instance, Trend auto-update behavior goes into the laptop versus stationary custom sites, while log maintenance or web reputation settings go into the company x vs company y custom sites. In order to keep the number of sites from expanding exponentially, you’ll want to keep your type of machine sites very simple, and target them by hardware type instead of network location.