Network Segments Configuration

Table of Contents

Network Segments Configuration

Device Security uses network segments to identify unique devices that use a shared IP address block.

Where Can I Use This?	What Do I Need?
Device Security (Managed by Strata Cloud Manager) (Legacy) IoT Security (Standalone portal)	One of the following subscriptions: Device Security subscription for an advanced Device Security product (Enterprise, OT, or Medical) Device Security X subscription

If you are using Device Security in Strata Cloud Manager, log in as a user with the Superuser role, and select NetworksNetwork Segments. If you are using the Device Security portal, log in as a user with owner or administrator privileges, and select NetworksNetworks and SitesNetwork Segments Configuration. There you can add, view, edit, and delete network segments used for identifying devices with devices with overlapping IP addresses. Network segments rely on IP address-based site assignment to be effective. While you can manage network segments when using firewall-based site assignment, they won't have any effect.

There are two sections on the Network Segments Configuration page.

At the top is a title bar, with titles for Networks, Network Segments Configuration, and Sites tabs. There is a global filter that controls the content displayed on the page by site, and the option to filter or query the content displayed on the page by firewall.
The Segments section is a table with information about individual network segments.

Create and Manage Network Segments

When creating a new network segment, enter a name and one or more firewalls to assign to the network segment. A network segment can have multiple firewalls assigned to it, but each firewall can only be assigned to one network segment. If you enter a firewall that is already assigned to a different network segment, the old assignment will be removed when you save the new network segment.

Optionally, enter a description and a site assignment for the network segment. A network segment can be assigned to only one site at a time. If no site is specified, the network segment is assigned to the default site.

To edit an existing network segment, find the network segment in the Segments table and click on the name to bring up the edit dialog.

Reset and Delete Network Segments

When you reset or delete a network segment, all devices and attributes learned through the network segment assignment are deleted from the assets inventory.

If you update the firewalls or the sites for a network segment, reset the network segment. Resetting the network segment ensures that traffic is properly mapped to the right device and avoids potential duplication or overriding of device attributes. In the Segments table, select the check boxes next to the network segments to reset, and then click Reset.

Delete network segments that you no longer need to avoid misidentification of devices and device attributes. In the Segments table, select the network segments to delete, and then click Delete. The network segment no longer appears in the Segments table.

Subnet-Site Mapping

Discover IoT Devices and Take Inventory

Device Security Docs

Network Segments Configuration

Device Security Docs

Network Segments Configuration

Create and Manage Network Segments

Reset and Delete Network Segments

Activation & Onboarding

Next-Generation Firewalls

SASE