(Legacy) IoT Security

1. Navigate to the Networks page (NetworksNetworks and SitesNetworks) and then click AddUpload Subnets.
2. Click the link to download the CSV template.
3. Fill out the template with subnet information.

   Enter the following for each subnet you want to upload:

   prefix: Enter the IP address of the subnet in dot-decimal notation and its netmask in CIDR notation (example, 10.1.1.0/24). This appears on the Subnets page, and for a device in this subnet, the subnet and netmask appear on the Devices and Device Details pages.

   vlan: (Optional) Enter a VLAN ID. If entered, this also appears on the Subnets page, and for a device in this subnet, it appears on the Devices and Device Details pages.

   description: (Optional) Enter a description of the subnet/VLAN, perhaps noting the type of devices for which it’s intended. These special characters are not allowed in the description field: ~ ` ! # $ % ^ & * + = { } [ ] | \ < > ? This description only appears on the Subnets page.

   static: Enter yes to define this as a subnet containing static IP addresses. When Device Security discovers a device from a user-configured static IP subnet in a different L2 domain from the firewall and adds it to its inventory, the Source column on the Devices page shows User-Configured. (Leave it blank if you do not want the subnet to be static).

   monitored: Enter yes if you want Device Security to provide device profiling, behavioral analysis, and risk monitoring of the devices in this subnet. Leave it blank if you only want Device Security to detect the devices in the subnet and perform a simplified device identity analysis. Based on this field, the Device Security portal displays Yes or No in the Monitored column in the Networks table on NetworksNetworks and SitesNetworks tab and provides the appropriate level of device monitoring, analysis, and protection.

   The Add a subnet option does not provide an option to specify a subnet as monitored or unmonitored. Device Security automatically classifies an added subnet as monitored. However, you can change its classification after you add it by selecting the subnet and clicking Stop Monitoringabove the Networks table. You can also make multiple selections to stop monitoring multiple subnets at the same time. Later you can select unmonitored subnets and click Start Monitoring above the table.

4. Upload the CSV file.

   On the Networks page, click AddUpload Subnets, choose or drag the completed CSV file onto the space in the dialog, and then click Upload.

   If Device Security previously detected network activity from an IP address in one of the uploaded subnets, it now considers it a static IP address and automatically adds a static IP device to the inventory on the Devices page. Similarly, if Device Security later detects traffic from an IP address in one of these subnets, it automatically adds an entry to the inventory at that time.

   It can take several minutes for new entries to appear on the Devices page.