In the Forcepoint Security Manager, a computer is the IP address (for example, 10.201.3.1 or fd3a:918a:71a1:bcaa::0011) associated with an end user's machine. A
network is the IP address range (for example, 10.201.3.2 - 10.201.3.44 or fd3a:918a:71a1:bcaa::1111 - fd3a:918a:71a1:bcaa::1211) that corresponds to a group of machines.
When you assign a policy to a computer or network, that policy is enforced regardless of who is logged on to the client machine, unless you have assigned a policy to the logged-on user. When on-premises components enforce policy, the computer or network policy takes precedence over any group policies that may apply to the user. (The hybrid service applies the group policy before applying a computer or network policy. See
Working with hybrid service clients.)