Define your internal IP address ranges and domain names to enable Cortex XSIAM to identify, track, and analyze network assets.
### **Define internal IP address ranges**
The **IP Address Ranges** page displays the address ranges that Cortex XSIAM Analytics monitors. Addresses are pre-populated with the default IPv4 and IPv6 address spaces. The names you define appear when investigating the network-related events in Cortex XSIAM.
You can add a new IP address range manually or upload IP address ranges from a CSV file.
How to define internal IP address ranges
1. Select **Inventory** → **Assets** → **Network Configuration** → **Internal IP Address Ranges**.
2. Do one of the following:
| To | Do this |
| ---------------------------------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
| Add a new IP address manually | <p>1. Click <strong>Add New Range</strong> → <strong>Create New</strong>, and then enter the IP address name and IP address range or CIDR values.</p><p>By default, Cortex XSIAM creates Private Network ranges that specify reserved industry-approved ranges. Private Network ranges are marked with a <img src="/docs/images/c0ca06623de67b16.png" alt="assets-private-network.png" data-size="line"> icon and you can only edit the name.</p><div data-gb-custom-block data-tag="hint" data-style="info" class="hint hint-info"><p>You can add a range that is fully contained in an existing range; however, you cannot add a new range that partially intersects with another range.</p></div><p>2. Click <strong>Save</strong>.</p> |
| Upload IP address ranges from a CSV file | <p>1. Select <strong>Inventory</strong>+Assets → Network Configuration → <strong>IP Address Ranges</strong>.</p><p>2. Click <strong>Add New Range</strong> → <strong>Upload from File</strong>.</p><p>3. Locate the CSV file you want to upload, and then click <strong>Add</strong>.</p> |
### **Define internal domain names**
1. Select **Inventory** → **Assets** → **Network Configuration** → **Internal Domain Suffixes**.
2. Type the domain suffix you want to include as part of your internal network, for example, **`acme.com`**.
3. Select <img src="/docs/images/f68548658d082ea4.png" alt="network-mapper-enter.png" data-size="line"> to add the suffix to the **Domains List**.