Mask IP addresses for event data sent out in event forwarding.
From the Trellix ESM dashboard, click → .
Click → .
Select settings on your Local Network.
To ensure obfuscation occurs the same way each time, enter a seed in the Seed value field, or click Generate to generate a random seed. This is useful if you obfuscate IP addresses across multiple Trellix ESM devices and want to keep the values synchronized.
Select to hide IP addresses inside and outside your local network. This extends to IP address custom types such as IPv4 and IPv6 addresses.
Enter a list of the IP addresses or subnets included in your Local Network, separated by commas (maximum of 2,000 characters).
If your Local Network is longer than 2,000 characters, consolidate multiple subnets into a shorter Local Network using Classless Inter-Domain Routing (CIDR) notation.
IP addresses are obfuscated when forwarded through event forwarding.