What is the filtering hierarchy among different levels of groups?

When speaking of hierarchy, it is simply the order in which R3000 filters or applies a profile to a given IP address and what group has priority over others. Filtering hierarchy among various group levels is as in the following:

a)      LDAP – Highest Priority:  If user’s IP belongs to IPGroup ‘and’ user authenticates, then the user is filtered based on the authenticated profile.  Within authentication, different levels are:

                                                               i.      Individual User

                                                             ii.      Container / OU

                                                            iii.      Group (Based on the group priority settings)

                                                           iv.      Domain/Tree

b)     IP Group – This profile will be applied to all IP addresses that are not authenticated but listed as a member of the IP Group.  Within the IP Groups, different levels are:

                                                               i.      Individual IP

                                                             ii.      Sub Group

                                                            iii.      Group

c)      Global Group – This is everyone who does not authenticate or is listed as a member of an IP Group but is defined in the Range to Detect Settings.

Please note that the “Minimum Filtering Level” applies to all groups but Global Group.  In other words, an actual profile of any group except for Global Group will be “Minimum Filtering Level + Rule”.