Create an Auto Query to exclude specified asset IP addresses from receiving scanning traffic.
始める前に
Role required: admin
手順
-
Navigate to the Auto Query page.
-
Select the add icon
.
-
In the Identification section, add the Auto Query name in the Auto Query Name field or use the generated name.
-
Select Next
-
In the Assets section, select the desired assets and targets.
The Assets section displays a choice of All Assets, New Assets Only, Incremental, Asset Discovery, and Asset Discovery & Query.
When the Query is set to use All Assets, then the Assets that
are marked as ignored, are excluded from the list of targets.
The Targets section lists All Sensors, Specific Sensors, and Auto Targeting.
-
Select Next
-
Specify any filters in the Filters selection.
You can specify Sites, Ports, Ethernet Vendors, Brands, Inbound and Outbound Protocols, Networks, Ignore Networks, and Hostnames.
-
To create the ignore list, select the Ignore Networks filter.
- To ignore an IP Address Range, enter an IP Range in the IP Address Range section, and select the add icon
.
- To ignore one individual IP address, enter an IP address in the Ignore IP Address section.
- To ignore multiple IP addresses, select the multiple selection icon
in the Ignore IP Address section, and use commas to separate the entries.
-
Select Next
-
In the Query Types section, select as many types needed from one or both the Simplified Query list or the Advanced Query list.
-
In the Classification section, if you choose to, you can select from the following.
- Console Hostname Look up: Attempts to determine an Asset's hostname based on its IP address.
- Location: Sets a label and the location field with Site name.
- Unknown: Marks the Asset brand and category Unknown.
-
Select Next
-
In the Confirmation section, set the schedule, recursion, and duration.
-
Select the Create Auto Query button to create the Auto Query ignore list.
タスクの結果
The Auto Query results are added to the Auto Query page. The
Ignored column displays the number of IP addresses that were ignored.
