Editing subnet settings

To edit subnet settings:

  1. Connect to the Kaspersky Industrial CyberSecurity for Networks Server through the web interface using the Administrator account.
  2. Select the Assets section.
  3. On the Address spaces tab, expand the block containing information about the address space in which you want to edit the subnet settings.
  4. Expand the Subnets block and select the relevant subnet.

    The details area appears in the right part of the web interface window.

  5. Click Edit.
  6. Depending on the necessary result, perform the following actions:
    • In the Subnet field, enter the subnet address in CIDR format: <base address of subnet>/<number of bits in mask>.

      The address of the root subnet cannot be edited.

    • In the Type drop-down list, select the type of subnet according to its purpose.

      When changing the subnet type, keep in mind that a new type of subnet may affect the accessible operations that the application can perform with IP addresses from this subnet. For example, if you select the Public type, the network interactions map will no longer display links to devices that were assigned IP addresses from this subnet.

    • Set the following toggle buttons to the necessary positions:
      • Ignore MAC addresses for NIC rules – enables and disables the mode for skipping detected MAC addresses when creating allow rules based on Network Integrity Control technology.

        If this option is enabled, the MAC addresses detected together with IP addresses from the subnet will not be added to Network Integrity Control rules in learning mode.

      • Automatically add subnets – enables and disables automatic addition of nested subnets according to data received from EPP applications.

        If this mode is enabled, the application adds nested subnets within this subnet based on data received from EPP applications. By default, the type selected for the current subnet is indicated for these nested subnets.

  7. Click Save.

If the Subnet value is changed, the tree hierarchy level may be changed for a subnet.

Page top