IP groups help administrators easily define advanced network security policy by narrowing appliance of certain rules to a group of certain remote stations. Using IP groups with clear names provides administrators better reference for later modifications of the rules and debugging.

IP groups can be defined under Network Policy / Address Groups. In Kerio ServerFirewall, number of address groups defined is not limited. Each group may include any number of the following items: an IP address, IP range, a subnet, another address group (IP groups can be embedded to other IP groups). Each address group may be defined by any group of hosts.