Create a device group based on system defined tag?

I am trying to create a device group for internet facing devices and there is already an internet facing system tag assigned to these devices. However, when I create a group trying to use the internet facing tag I get no members. If I manually assign a tag then the group populates.

I'm trying to do this to create a notification for internet facing services that have a known vulnerability.

Can anyone confirm whether this functionality is available?