IP Scope
Including And Excluding Networks From Discovery
By default, there are no limitations on discovery and all IP addresses
are allowed (i.e. Include scope is 0.0.0.0/0
).
The Include and Exclude lists act as an Access Control List for IP Fabric, when an IP Address is found during discovery it is then checked against this ACL.
graph LR
ip[IP Found During Discovery] --> exclude{Is IP in Exclude List?}
exclude -->|No| include{Is IP in Include List?}
include -->|Yes| continue[Continue with Discovery Logic]
include --> |No| doNotDiscover[Do Not Discover]
exclude -->|Yes| doNotDiscover[Do Not Discover]
style continue fill:#33dd00
style doNotDiscover fill:#dd3300
Discovery can be limited to one or more subnets using Settings → Discovery & Snapshots → Discovery Settings → Discovery → IP Scope → IP networks to include in discovery and analysis. Enter one or more subnets to limit the discovery process to addresses from particular networks.
Specific parts of the network can be also excluded from discovery using Settings → Discovery & Snapshots → Discovery Settings → Discovery → IP Scope → IP networks to exclude from discovery and analysis.
Priority
Exclude option takes precedence over include.
API Discovery
IP Scope settings are not applied to Vendors discovered using API (everything is downloaded and used in discovery).
Example:
IP networks to include in discovery and analysis: 10.0.0.0/8
IP networks to exclude from discovery and analysis: 10.24.0.0/16
Result: Only network 10.0.0.0/8
is scanned excluding 10.24.0.0/16
subnet.