Adding hosts to the home network using the CLI

Prev Next

Follow these steps to add IP addresses to the data exfiltration detection home network list.

When data exfiltration detection is enabled, the appliance monitors the egress traffic from the hosts specified in the home network list. The list is empty by default.

Important

After you configure or edit the homenet list, it takes 72 hours to build baseline egress traffic profiles for the specified hosts and networks.

Prerequisites

To add an IP address range to the data exfiltration detection homenet list:
  1. Add a range of IP addresses to the data exfiltration detection homenet list by using the following command. Specify an IPv4 address range in classless inter-domain routing (CIDR) format.

    smartvision exfil homenet <ip address>/<prefix>

    The following the example, hosts with IP addresses from 10.13.65.0 through 10.13.65.255 are added to the list of hosts monitored for data exfiltration activity:

    hostname (config) # smartvision exfil homenet 10.13.65.0/24
  2. Verify your configuration change.

    hostname (config) # show smartvision config 
    
    SmartVision Config
                  .
                  .
                  .
            Data exfil detection customer networks:
                    10.13.65.0/24
                  .
                  .
                  .