Can I deploy an application to a group of computers based on version of a software package?

Can I deploy an application to a group of computers based on version of a software package?

Hello,

I see that EC can inventory software and it has Global Protect in its catalog (cool!). 

We have several users with older versions of Global Protect, and I can find which ones by using the Inventory function. However, I can't seem to group the ones with older versions in a way that the deployment can run on them. I can manually type in all of the computer names but that will be cumbersome and time consuming. Is there a way to group them together, or have Global Protect run on computers with an older version?