Manage Networks

In the platform, you can add, modify and delete networks in a CIDR format. The system supports identification of network subnets. This will help Google Security Operations identify internal assets and consider the sensitivity of the network when running playbooks.

The network names will be displayed in Cases and Reports for readability. For example, an entity with an IP address that was set, will appear as an Internal Entity in the Cases screen, and will have the 'isInternal:True' field. The option to export and import multiple networks is supported using the Export/Import buttons.
You can also choose to download a template, use this format to add networks and then import the information back in. This can be useful if you are a new customer and want to import existing information into the platform.

To add a new network:

1. Navigate to Settings > Environments > Networks.
2. Click the plus icon on the top right of the screen.
3. In the New Network dialog box add in the relevant information. The Priority decides the order of the networks. If an entity fits several ranges, it will select the top priority one.

   

4. Click Add.

Note: Users can add sub-networks with smaller ranges. The entity will match against the smallest network that fits.