Adding Network Groups Parent topic

To allow Deep Discovery Inspector to determine whether attacks originate from within or outside the network, use IP addresses to establish groups of monitored networks.
Note
Note
When Deep Discovery Director is managing the network groups and assets, the settings for network groups and assets are disabled in Deep Discovery Inspector. Go to the Deep Discovery Director management console to configure the network groups and assets.

Procedure

  1. Go to Administration → Network Groups and Assets → Network Groups.
  2. Click Add.
    The Network Groups window appears.
  3. Type a group name.
    Note
    Note
    Provide specific groups with descriptive names for easy identification of the network to which the IP address belongs. For example: "Finance network", "IT network", or "Administration".
  4. Type an IP address range in the text box (up to 1,000 IP address ranges).
    Note
    Note
    The IP address range cannot contain a Class D or Class E address (224.0.0.0 - 255.255.255.255)
    Deep Discovery Inspector provides a default network group containing the following IP address blocks reserved by the Internet Assigned Numbers Authority (IANA) for private networks:
    • IPv4: 10.0.0.0 - 10.255.255.255
    • IPv4: 172.16.0.0 - 172.31.255.255
    • IPv4: 192.168.0.0 - 192.168.255.255
    • IPv6: fe80::-febf:ffff:ffff:ffff:ffff:ffff:ffff:ffff
    • IPv6: fc00::-fdff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
    • IPv6: fec0::-feff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
    Tip
    Tip
    Create a new network group by editing the Default network group.
    1. Click Default to edit and add a new network group.
    2. Use a dash to specify an IP address range.
      The Network Groups window supports IPv4 and IPv6:
      • IPv4 example: 192.168.1.0-192.168.1.255
      • IPv6 example: 2620:1005::123-2620:1005::460
    3. Use a slash to specify the subnet mask/prefix for IP addresses.
      • IPv4 subnet mask example: 192.168.1.0/24
      • IPv6 subnet prefix example: fd00:1:1111:200::1000/116
    Note
    Note
    Add up to three layers of sub-groups.
  5. Select the Network zone.
    Note
    Note
    Trusted indicates a secure network and Untrusted indicates a degree of doubt about the security of the network.
  6. Click Add.
  7. Click Save.