Silenced IP range tab
You can silence ranges of IP addresses. Any detections regarding a silenced IP address range or host are not displayed and email notifications are not generated. However, the event is still detected and logged.
Use the Silenced IP tab to view and modify the silenced IP address ranges.
Filter the displayed list. In the Sensor category, select a License, either a specific license or All licenses, from the pull-down menu. Next select a Sensor, either a specific sensor/sensor group or All sensors from the pull-down menu.
To create a new silenced entry, click the button.
The Silenced IP ranges list includes the following fields:
- Label
-
The label for the silenced entry.
Click the icon to sort the list by label.
- Sensor
-
The sensor or sensor group containing the silenced entry.
Click the icon to sort the list by sensor.
- IP range start
-
The starting IP address for the silenced entry.
Click the icon to sort the list by start range.
- IP range end
-
The ending IP address for the silenced entry.
Click the icon to sort the list by end range.
- Actions
-
Click to edit the silenced label.
Click to delete the silenced label.
Create a silenced entry
Provide the following:
-
Select a License, either a specific license or All licenses, from the pull-down menu.
-
Select a Sensor, either a specific sensor or a sensor group from the pull-down menu. If you select an individual sensor from a sensor group or All sensors, you will get an error.
-
Enter a Label. This is a text string.
-
Enter an IP address in the IP range start field.
-
Enter an IP address in the IP range end field.
When you have completed all the fields, click
.Edit a silence entry
This populates the entry fields with the values from the selected silenced entry. You can only change the IP range start and IP range end fields. Make your changes then click .