Fortinet white logo
Fortinet white logo

User Guide

Device Filter

Device Filter

This setting allows you to limit the set of devices that the system automatically learns from logs and Netflows. After receiving a log from a device, the system automatically learns that device and adds it to CMDB. When a TCP/UDP service is detected running on a server from Netflow analysis, the server along with the open ports are added to CMDB.

Sometimes, you may not want to add all of these devices to CMDB. You can create filters to exclude a specific set of devices from being added to CMDB. Each filter consists of a required Excluded IP Range field and an optional Except field.

  1. Go to Admin > Settings > Discovery > Device Filter.
  2. Click +.
  3. In the Range Definition dialog box, enter the following information:You can add multiple values for these fields by clicking the + icon or remove an entry by clicking the - icon.
    1. Excluded IP Ranges - A device will not be added to CMDB if it falls in the range defined in the Excluded IP Range field. For example, if you wanted to exclude the 172.16.20.0/24 network from CMDB, add a filter with 172.16.20.0-172.16.20.255 in its Excluded IP Range field.
    2. Except - This field allows you to specify some exceptions in the excluded range. For example, if you wanted to exclude the 172.16.20.0/24 network without excluding the 172.16.20.0/26 network, add a filter with 172.16.20.0-172.16.20.255 in the Excluded IP Range field, and 172.16.20.192-172.16.20.255 in the Except field.
  4. Click Save.

Click the Apply () icon to apply the filter.

Device Filter

Device Filter

This setting allows you to limit the set of devices that the system automatically learns from logs and Netflows. After receiving a log from a device, the system automatically learns that device and adds it to CMDB. When a TCP/UDP service is detected running on a server from Netflow analysis, the server along with the open ports are added to CMDB.

Sometimes, you may not want to add all of these devices to CMDB. You can create filters to exclude a specific set of devices from being added to CMDB. Each filter consists of a required Excluded IP Range field and an optional Except field.

  1. Go to Admin > Settings > Discovery > Device Filter.
  2. Click +.
  3. In the Range Definition dialog box, enter the following information:You can add multiple values for these fields by clicking the + icon or remove an entry by clicking the - icon.
    1. Excluded IP Ranges - A device will not be added to CMDB if it falls in the range defined in the Excluded IP Range field. For example, if you wanted to exclude the 172.16.20.0/24 network from CMDB, add a filter with 172.16.20.0-172.16.20.255 in its Excluded IP Range field.
    2. Except - This field allows you to specify some exceptions in the excluded range. For example, if you wanted to exclude the 172.16.20.0/24 network without excluding the 172.16.20.0/26 network, add a filter with 172.16.20.0-172.16.20.255 in the Excluded IP Range field, and 172.16.20.192-172.16.20.255 in the Except field.
  4. Click Save.

Click the Apply () icon to apply the filter.