I did some simple things in the hope of being able to report more easily, such as defining RFC 1918 space, but I cannot find a way to filter on that. Is there a way to do so?
Solved! Go to Solution.
Do you mean filtering in traffic log monitoring tab?
RFC 1918 space can be easily done with custom filter for example taking source address
(addr.src in 10.0.0.0/8 ) or (addr.src in 172.16.0.0/12 ) or (addr.src in 192.168.0.0/16 )
In custom reports filter works as above
Yes, I did mean that and in custom reports which use the same filter structure.
Maybe RFC 1918 space is a bad example. We have a branch structure in our organization and we have branches ip addresses defined in the addresses and address groups, and those branches are also grouped together with their own address groups. It would be VASTLY easier to write filters for these groups when they are often not contiguous IP space rather than these extremely long strings of filtering when it could be as simple as addr in <Group Name>.
This would be a great feature.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!