Filter by IP address range

[RemiLiquete]

Hello there,

I've definied multiple IP address ranges in the assets module of Cortex XDR console.

Some range belongs to the same factory.

Ranges have a name like this :

FactoryName - VlanName

We have multiple units.

Somes units contains multiple factories.

I would like to create dynamics endpoints group (for units) filtered on the IP address range name.

It would be easier to filter on 10 IP address ranges name instead of 100+ IP address ranges.

Unfortunately, I didn't find anyway to do this.

Is anyone find a way to achieve this?

Regards,

Rémi.

[jmazzeo · Accepted solution]

Hi @RemiLiquete, thanks for reaching us using the Live Community.

The Network IP Ranges under Assets can be used to:

• Distinguish between assets managed and unmanaged by a Cortex XDR agent.
• Identify assets that are part of your internal network.
• Track network data communications from within and outside your network.

 This feature can't be used to create Endpoint Groups, sadly.

The Endpoint Groups configuration requires to write the IP Range in the group definition:

If this post solves your issue, please mark it as the solution.