<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Filter by IP address range in Cortex XDR Discussions</title>
    <link>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/filter-by-ip-address-range/m-p/579499#M6277</link>
    <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/311763"&gt;@RemiLiquete&lt;/a&gt;, thanks for reaching us using the Live Community.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P data-unlink="true"&gt;The Network IP Ranges under Assets &lt;A href="https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Network-Configuration" target="_self"&gt;can be used&amp;nbsp;to&lt;/A&gt;:&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;UL&gt;
&lt;LI&gt;Distinguish between assets managed and unmanaged by a Cortex XDR agent.&lt;/LI&gt;
&lt;LI&gt;Identify assets that are part of your internal network.&lt;/LI&gt;
&lt;LI&gt;Track network data communications from within and outside your network.&lt;/LI&gt;
&lt;/UL&gt;
&lt;P&gt;&amp;nbsp;This feature can't be used to create Endpoint Groups, sadly.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;The Endpoint Groups configuration requires to write the IP Range in the group definition:&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="jmazzeo_0-1709748626324.png" style="width: 570px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/58114i8F8A923A332034D2/image-dimensions/570x258/is-moderation-mode/true?v=v2" width="570" height="258" role="button" title="jmazzeo_0-1709748626324.png" alt="jmazzeo_0-1709748626324.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;If this post solves your issue, please mark it as the solution.&lt;/P&gt;</description>
    <pubDate>Wed, 06 Mar 2024 18:11:26 GMT</pubDate>
    <dc:creator>jmazzeo</dc:creator>
    <dc:date>2024-03-06T18:11:26Z</dc:date>
    <item>
      <title>Filter by IP address range</title>
      <link>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/filter-by-ip-address-range/m-p/579477#M6276</link>
      <description>&lt;P&gt;Hello there,&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;I've definied multiple IP address ranges in the assets module of Cortex XDR console.&lt;/P&gt;
&lt;P&gt;Some range belongs to the same factory.&lt;/P&gt;
&lt;P&gt;Ranges have a name like this :&lt;/P&gt;
&lt;P&gt;FactoryName - VlanName&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;We have multiple units.&lt;/P&gt;
&lt;P&gt;Somes units contains multiple factories.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;I would like to create dynamics endpoints group&amp;nbsp;(for units) filtered on the IP address range name.&lt;/P&gt;
&lt;P&gt;It would be easier to filter on 10 IP address ranges name instead of 100+ IP address ranges.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Unfortunately, I didn't find anyway to do this.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Is anyone find a way to achieve this?&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Regards,&lt;/P&gt;
&lt;P&gt;Rémi.&lt;/P&gt;</description>
      <pubDate>Wed, 06 Mar 2024 15:18:31 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/filter-by-ip-address-range/m-p/579477#M6276</guid>
      <dc:creator>RemiLiquete</dc:creator>
      <dc:date>2024-03-06T15:18:31Z</dc:date>
    </item>
    <item>
      <title>Re: Filter by IP address range</title>
      <link>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/filter-by-ip-address-range/m-p/579499#M6277</link>
      <description>&lt;P&gt;Hi&amp;nbsp;&lt;a href="https://live.paloaltonetworks.com/t5/user/viewprofilepage/user-id/311763"&gt;@RemiLiquete&lt;/a&gt;, thanks for reaching us using the Live Community.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P data-unlink="true"&gt;The Network IP Ranges under Assets &lt;A href="https://docs-cortex.paloaltonetworks.com/r/Cortex-XDR/Cortex-XDR-Pro-Administrator-Guide/Network-Configuration" target="_self"&gt;can be used&amp;nbsp;to&lt;/A&gt;:&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;UL&gt;
&lt;LI&gt;Distinguish between assets managed and unmanaged by a Cortex XDR agent.&lt;/LI&gt;
&lt;LI&gt;Identify assets that are part of your internal network.&lt;/LI&gt;
&lt;LI&gt;Track network data communications from within and outside your network.&lt;/LI&gt;
&lt;/UL&gt;
&lt;P&gt;&amp;nbsp;This feature can't be used to create Endpoint Groups, sadly.&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;The Endpoint Groups configuration requires to write the IP Range in the group definition:&lt;/P&gt;
&lt;P&gt;&lt;span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="jmazzeo_0-1709748626324.png" style="width: 570px;"&gt;&lt;img src="https://live.paloaltonetworks.com/t5/image/serverpage/image-id/58114i8F8A923A332034D2/image-dimensions/570x258/is-moderation-mode/true?v=v2" width="570" height="258" role="button" title="jmazzeo_0-1709748626324.png" alt="jmazzeo_0-1709748626324.png" /&gt;&lt;/span&gt;&lt;/P&gt;
&lt;P&gt;&amp;nbsp;&lt;/P&gt;
&lt;P&gt;If this post solves your issue, please mark it as the solution.&lt;/P&gt;</description>
      <pubDate>Wed, 06 Mar 2024 18:11:26 GMT</pubDate>
      <guid>https://live.paloaltonetworks.com/t5/cortex-xdr-discussions/filter-by-ip-address-range/m-p/579499#M6277</guid>
      <dc:creator>jmazzeo</dc:creator>
      <dc:date>2024-03-06T18:11:26Z</dc:date>
    </item>
  </channel>
</rss>

