Showing results for 
Show  only  | Search instead for 
Did you mean: 
Level 14
Report Inappropriate Content
Message 1 of 3

I guess this could be a sorting bug or I don't know what else...


we have ePO 4.5 Patch 3 on Windows server 2003 on the internal network.

We have a system tree group, where we collect our DMZ hosts by using IP sorting criteria. That sorting did not work properly ever since the group was created. Now I consolidated the criteria by creating a tag on DMZ IP range and adding it to the DMZ group criteria resulting in the group now having two sorting categories.

The tag applies all DMZ host successfully. However when I ran a test sort on these hosts, half of the would sort into the DMZ group and half of them would sort into the global Lost and found.

When I remove the IP sorting criterion from the group and leave just the tag in place, test sorting produces the same mixed results, that is, a portion of the 10+ computers would go to correct DMZ group, and rest of them would go to global Lost and Found. The two sets (this and above) might be different though.

A cherry on cake that hosts that would correctly sort into the group sort into the group's Lost and Found and not within the group itself (true, that the group is a second level one and no other subgroup exists within.). This is the funniest logic I've ever seen.

DMZ hosts can successfully report into ePO and we do not want to hold an AH or ePO for these 10+ hosts. I'd rather see sorting working correctly than manually placing ever changing number of computers into the group regularly.

I would appreciate if someone got me on the right track, how to do this properly or confirm if this is a bug within sorting logic.


Message was edited by: Attila Polinger on 16/02/11 12:22:22 CET
2 Replies

Re: I guess this could be a sorting bug or I don't know what else...

Occasionally, I have seen weird results sorting as well. When sorting into sub-groups, I try to give the parent group sorting criteria that matches any of the sub groups as well. As an example...

My Org.

---Internal (,,

     |--- Production (

     |--- Development (

     \--- Testing Lab (

--External (tag:DMZ, tag:VPN)

    |--- DMZ (tag:DMZ)

    \--- VPN (tag:VPN)


Also, you can control the Sorting Order between groups on the same level. So in the example above, when I select My Org., I can tell the External group to be evaluated first, then if the system doesn't match it'll continue to the Internal, and eventually fall through to the L&F if it doesn't match anything.

Level 14
Report Inappropriate Content
Message 3 of 3

Re: I guess this could be a sorting bug or I don't know what else...

Thanks for the tips Joel. I was not yet fully aware of Sorting Order rearranging feature until your post. However I still do not feel sorting works well, because I have no other group that would qualify as landing place for DMZ clients. I wonder if this is one thing the Sorting Order can help with...

All our DMZ clients report correctly into ePO, and receive the DMZ tag. Yet when I test sort them, not all of them would go into a single group that has a sorting criteria no other group has.

I continue investigating...


You Deserve an Award
Don't forget, when your helpful posts earn a kudos or get accepted as a solution you can unlock perks and badges. Those aren't the only badges, either. How many can you collect? Click here to learn more.

Community Help Hub

    New to the forums or need help finding your way around the forums? There's a whole hub of community resources to help you.

  • Find Forum FAQs
  • Learn How to Earn Badges
  • Ask for Help
Go to Community Help

Join the Community

    Thousands of customers use the McAfee Community for peer-to-peer and expert product support. Enjoy these benefits with a free membership:

  • Get helpful solutions from McAfee experts.
  • Stay connected to product conversations that matter to you.
  • Participate in product groups led by McAfee employees.
Join the Community
Join the Community