Quantcast
Channel: THWACK: Message List - Security Event Manager (SEM) - Formerly Log & Event Manager
Viewing all articles
Browse latest Browse all 5385

Re: Group containing a network for rule filter?

$
0
0

Very old thread I know, but since I'm dealing with something similar I figured I'd add this just in case anyone else came across this when searching like I have.  Wild cards are probably a much better way than entering/importing a bunch of IP addresses into a group.  Just make a user defined group, then put in objects that represent the all the subnets you need to group together.  So here are three different examples:192.168.2.*, 10.0.*, or 172.16.3.*  Just make sure you put the wildcard after a period so that you don't get unexpected results.  Filtering a subnet like this 192.168.2* is not the same as 192.168.2.*, since the first one would catch 192.168.2.x or 192.168.2x.x or 192.168.2xx.x  Pretty obvious to some people I'm sure, but it is an easy mistake to make when adding several subnets to a group.


Viewing all articles
Browse latest Browse all 5385

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>