Monitored Networks

Use the Monitoring Networks page in OT Security EM to define and manage CIDR network boundaries for all ICPs from a single location instead of configuring each ICP individually. This reduces operational workload for organizations managing 10 or more ICPs and ensures consistent network configuration across your entire OT infrastructure.

The Monitored Network configuration contains a set of IP ranges (CIDRs / subnets) that define the monitoring boundaries for OT Security. OT Security ignores all assets outside of these configured ranges.

By default, OT Security configures three default public ranges: 10.0.0.0/8, 172.16.0.0/12, and 192.168.0.0/16, as well as the link-local Automatic Private IP Addressing (APIPA) range of 169.254.0.0/16.

To disable any of the default ranges or add custom ranges for your network:

1. Go to Sites Management > Monitored Networks.

   The Monitored Networks page appears.

   

2. (Optional) Customize tables as required. For more information, see Customize Tables.

3. The Monitored Networks table includes the following details:

   Column	Description
   Default IP Ranges and Custom IP Ranges	The Default IP Ranges section displays the default IP ranges configured in OT Security. The Custom IP Ranges section displays any subnet that you manually create.
   Network Name	The global name of the network.
   Network Description	A description about the network.
   	Hover over a value to display the Copy button. You can use this to copy the parameter value.
   Monitored	A toggle to enable or disable the monitoring for the configured IP addresses. Monitoring is enabled by default.

Add Subnets

You can add a single subnet or a list of multiple subnets for monitoring.

To add a new subnet:

1. Go to Sites Management > Monitored Networks.

   The Monitored Networks page appears.

2. In the upper-right corner, click Add New Subnets.

   A menu appears.

3. Select one of the following:

   • Add One Subnet — To add a single subnet.

   • Add Subnets List — To add multiple subnets.

   The Add Subnet panel appears.

   

4. If you selected Add One Subnet:

   1. In the Subnet box, type the IP address range in the CIDR format. For example, 192.168.1.0/24.

   2. In the Network Name box, type a name for the network.

   3. (Optional) In the Description box, type a description for subnet.

   4. Click Next.

      The Subnet Locations panel appears.

      

   5. In the Site Distribution drop-down box, select the physical sites that include this subnet.

   6. (Optional) In the Enable Monitoring drop-down box, select the sites where you want to enable monitoring.

   7. Click Save.

5. If you selected Add Subnets List:

   1. In the CIDR box, provide the list of CIDRs, one CIDR per line.

   2. Click Next.

      The Subnet Locations panel appears.

   3. In the Site Distribution drop-down box, select the physical sites that include these subnets.

   4. (Optional) In the Enable Monitoring drop-down box, select the sites where you want to enable monitoring.

   5. Click Save.

   OT Security saves the subnets and displays them on the Monitored Networks page.

Edit a Subnet

You can edit an existing subnet to make changes to it.

1. In the Monitored Networks table, do one of the following:

   • Select the checkbox next to the subnet you want to edit.

     OT Security enables the Actions menu.

   • Right-click the row of the IP range you want to edit.

     A menu appears.

2. Select Edit Details.

   The Edit Details panel appears.

3. Modify the configuration details as needed.

4. Click Save.

   OT Security saves the changes to the subnets.

Manage Locations

Use the Manage Locations option to assign additional sites to a subnet and to enable monitoring on these sites.

1. In the Monitored Networks table, do one of the following:

   • Select the checkbox next to the subnet you want to modify.

     OT Security enables the Actions menu.

   • Right-click the row of the IP range you want to modify.

     A menu appears.

2. Select Manage Locations.

   The Manage Locations panel appears.

3. Edit the Site Distribution and Enable Monitoring (Optional) fields as needed.

4. Click Save.

   OT Security updates your subnet site changes.