Generating a list of subnets for asset management

Expand all | Collapse all

You can manually generate a list of subnets known to the application so that the application can operate according to the specific addressing of the devices in your enterprise network.

Only users with the Administrator role can generate a list of subnets.

You can use the following functions to generate a list of subnets:

• Adding a subnet

  To add a subnet:

  1. Connect to the Kaspersky Industrial CyberSecurity for Networks Server through the web interface using the Administrator account.
  2. Select the Assets section.
  3. On the Subnets tab, open the details area by clicking the Add subnet link.
  4. In the Subnet field, enter the subnet address in CIDR format: <base address of subnet>/<number of bits in mask>.
  5. In the Type drop-down list, select the type of subnet according to its purpose.
  6. If necessary, enable or disable the option to ignore detected MAC addresses when creating allow rules for Interaction Control. To do so, set the Ignore MAC addresses for NIC rules toggle to the necessary position.

     If this option is enabled, the MAC addresses detected together with IP addresses from the subnet will not be added to Network Integrity Control rules in learning mode.

  7. Click Save.

  The list of subnets will show the new subnet at its corresponding level of the hierarchy within the tree.

• Editing subnet settings

  To edit the settings of a subnet:

  1. Connect to the Kaspersky Industrial CyberSecurity for Networks Server through the web interface using the Administrator account.
  2. Select the Assets section.
  3. On the Subnets tab, select the relevant subnet.

     The details area appears in the right part of the web interface window.

  4. Click the Edit button.
  5. Change the relevant settings of the subnet.

     When changing the subnet type, keep in mind that a new type of subnet may affect the accessible operations that the application can perform with IP addresses from this subnet. For example, if you select the Public type, the network map will no longer display links to devices that were assigned IP addresses from this subnet.

  6. Click Save.

  If the Subnet parameter is changed, the tree hierarchy level may be changed for a subnet.

• Deleting subnets

  You can delete any subnet except the root subnet in the tree (subnet 0.0.0.0/0).

  To delete subnets:

  1. Connect to the Kaspersky Industrial CyberSecurity for Networks Server through the web interface using the Administrator account.
  2. Select the Assets section.
  3. On the Subnets tab, select the subnets that you want to delete.

     The details area appears in the right part of the web interface window.

  4. Click the Remove button.

     A window with a confirmation prompt opens.

  5. In the prompt window, confirm deletion of the subnets.

  Deleted subnets will no longer be displayed in the list of subnets. If a deleted subnet contained nested subnets, these subnets will remain in the list (but the tree hierarchy level of these subnets will change).

Page top