Define in-network IP addresses

Overview

Use the IP addresses settings to list in-network IP addresses you trust. This list enables Incydr to label activity from any IP address not on the list as Remote activity. It also allows you to customize search results and dashboards throughout the Incydr console to include in-network activity, remote activity, or both.

Considerations

To use this functionality, your role must have permissions to view and modify data preferences.

IP addresses

To view and edit your list of in-network IP addresses:

1. Sign in to the Incydr console.
2. Navigate to Administration > Environment > IP addresses.

Item		Description
a	Add	Click to add a new IP address or range.
b	IP addresses	The in-network IP address or range. For example, add the public IP addresses used by your devices, such as the NAT IP ranges for your corporate offices. Supported formats: A single IPv4 or IPv6 address. For example: 203.0.113.0. A range of addresses using CIDR block notation format. For example: 233.252.0.0/24. VPN activity If you consider file activity from devices connecting over a VPN to be “in-network,” add the IP addresses of your VPN network here. To consider VPN traffic as remote activity, do not include IP addresses for your VPN.
c	Description	The description entered for this IP address or range. Descriptions are limited to 50 characters.
d	Created	Indicates when this entry was added to the list of in-network IP addresses. Date and time are reported in Coordinated Universal Time (UTC).
e	IP last modified	Indicates when the IP addresses value was last updated. Updating only the Description does not affect this timestamp.  File activity from an IP address is identified as in-network beginning the date it is added to this list. File activity from an IP address that occurred before it was added to this list is considered remote activity. Date and time are reported in Coordinated Universal Time (UTC).
f	Edit	Click to edit the IP addresses or Description for this entry.
g	Actions	Click to perform additional actions, such as delete this entry from the list of in-network IP addresses.

Related topics

• Search file activity with Forensic Search
• File event metadata reference 
• Trusted activity