Establish groups of monitored networks using IP addresses to allow
Deep Discovery Inspector to determine whether attacks originate from within or
outside the network.
Procedure
- Click Add.
- Specify a group name.
Tip
Provide specific groups with descriptive names for easy identification of the network to which the IP address belongs. For example, "Finance network", "IT network", or "Administration". - Specify an IP address range in the text box (up to 1,000 IP address
ranges).Deep Discovery Inspector comes with a monitored network called Default, which contains the following IP address blocks reserved by the Internet Assigned Numbers Authority (IANA) for private networks:
-
10.0.0.0 - 10.255.255.255
-
172.16.0.0 - 172.31.255.255
-
192.168.0.0 - 192.168.255.255
Note
-
If you did not remove Default, you do not need to specify these IP address blocks when adding a new monitored network.
-
Use a dash to specify an IP address range.Example: 192.168.1.0-192.168.1.255.
-
Use a slash to specify the subnet mask for IP addresses.Example: 192.168.1.0/255.255.255.0 or 192.168.1.0/24.
-
Up to three layers of sub-groups can be added.
-
- Select the network zone of network group:
-
Trusted: This is a secure network
-
Untrusted: There is a degree of doubt about the security of the network.
-
- Click Add.
- Click Finish.