IP Prefix Lists

IP prefix lists are extension for classifiers and parsing rules, which include lists of IP addresses. If messages from more “Fortigate” devices are sent to Logmanager, list of these devices IP addresses can be defined. Then you can directly query this IP prefix list in classifiers and parsing rules. For example if a message came to Logmanager from a IP address included in the IP prefix list.

This function is used in the IP Prefix list block. This block includes a list of all IP prefix lists, which can be used in classifier or parsing rule.

List of the prefix lists shows all records defined in the system. Table shows basic information: Name (name of the prefix list), Description (description of the prefix list) and Built in (if the prefix list is integrated in the system).

Filter fields are above the table. Data may be filtered by any single column. In case of using filters above more columns, AND term is applied.

If you need to add a new prefix list, click on the green plus icon in the main table in the upper right corner.

Enter following data into the prepared form:

• Name: table name,

• Description: table description,

• Content: list of values, one IP address or network address in “0.0.0.0” format on an every single row. For example list of private addresses:

  192.0.0.0/24
  192.0.2.0/24
  192.168.0.0/16
  

Adding of the prefix list is done by clicking on the Create button, canceling of the completed form and returning back to the main table is done by clicking on the Cancel button.

Editing of the prefix list can be started by clicking on the blue pencil icon, which is shown by every row. Integrated prefix lists cannot be edited nor deleted.

Form identical with the form for adding of a new prefix list is now shown.

Change of the prefix list is done by clicking on the save button, canceling of the completed form and return back to the main table is done by clicking on the Cancel button.

Deletion of a prefix list is done by clicking on the red cross icon, which is shown by every row.

After clicking on the cross a new dialog window delete a prefix list is opened and the name of the prefix list to be deleted is shown for checking. To continue and delete the prefix list, click on the yes button, to cancel, click on the no button.