Views:

Establish groups of monitored networks using IP addresses to allow Deep Discovery Inspector to determine whether attacks originate from within or outside the network.

  1. Click Add.
  2. Specify a group name.
    Tip:

    Provide specific groups with descriptive names for easy identification of the network to which the IP address belongs. For example, "Finance network", "IT network", or "Administration".

  3. Specify an IP address range in the text box (up to 1,000 IP address ranges).

    Deep Discovery Inspector comes with a monitored network called Default, which contains the following IP address blocks reserved by the Internet Assigned Numbers Authority (IANA) for private networks:

    • 10.0.0.0 - 10.255.255.255

    • 172.16.0.0 - 172.31.255.255

    • 192.168.0.0 - 192.168.255.255

    Note:

    • If you did not remove Default, you do not need to specify these IP address blocks when adding a new monitored network.

    • Use a dash to specify an IP address range.

      Example: 192.168.1.0-192.168.1.255.

    • Use a slash to specify the subnet mask for IP addresses.

      Example: 192.168.1.0/255.255.255.0 or 192.168.1.0/24.

    • Up to three layers of sub-groups can be added.

  4. Select the network zone of network group:

    • Trusted: This is a secure network

    • Untrusted: There is a degree of doubt about the security of the network.

  5. Click Add.
  6. Click Finish.
Parent topic: Deep Discovery Inspector Policy Settings