Owned IPv4 Ranges - User Guide - 2 - Cortex XPANSE - Cortex - Security Operations

Cortex Xpanse Expander User Guide

Product
Cortex XPANSE
Version
2
Creation date
2024-03-28
Last date published
2024-04-17
Category
User Guide
Solution
Cloud
Abstract

View all the IPv4 addresses, in the form of ranges, that Cortex Xpanse has attributed to your organization.

The Owned IPv4 Ranges page displays a list view of all IPv4 addresses, in the form of ranges, that Cortex Xpanse has attributed to your organization. Owned IPv4 range information is also available on the asset details panel when an owned IP address is used to attribute an asset to your organization.

Cortex Xpanse collects IP registration information from various publicly available sources including ARIN, RIPE, APNIC, LACNIC, and AFRINIC. Registry information in your Cortex Xpanse is updated approximately biweekly.

The Registration Record for an IP range includes the following information:

  • Network—Name, Handle, Start Address, End Address, and Last Refreshed

  • Organization Name—Name, Handle, Email, Phone, Address, Last Changed

Navigate to InventoryOwned IPv4 Ranges to view the complete list of owned IPv4 ranges discovered by Cortex Xpanse. Click on a row in the Owned IPv4 Ranges table to display the IP range details, including asset attribution evidence, registration records, and ASN information, in the details panel on the right.

The table below describes the fields displayed on the Owned IPv4 Ranges page.

Field

Description

Active Owned Responsive IPs Count

Number of active IP addresses in the range.

ASN Countries

ASN countries associated with an owned responsive IP or IP range.

ASN Handles

ASN handles associated with an owned responsive IP or IP range.

ASN Record Names

ASN record names associated with an owned responsive IP or IP range.

ASN Registries

ASN registries associated with an owned responsive IP or IP range.

Business Unit

The organization that owns the asset.

Date Added

The first time that Cortex Xpanse identified this IP Range.

First IP Address

First IP address value of the defined range.

Last IP Address

Last IP address value of the defined range.

IPs Count

Number of IP addresses in the range.

Notes

Notes that were manually added to the asset in Expander.

Tags

The following types of tags can be applied to Owned IP Ranges:

  • AR—Attribution reason tags. Indicates whether the IP range was attributed to you because it Has your Content or is Registered to You.

  • IPR—IP range tag. Custom tag that can be applied to Owned IPv4 or IPv6 ranges.

  • TR—Rules-based tag.

You can use asset tag rules to define custom IPv4 ranges. Asset tag rules apply tags automatically to assets that match your rule criteria, including any new assets that are attributed to your organization. Define asset tag rules on the Policies and RulesAsset Tag Rules page. See Asset Tagging for more information.