Create an ignored IP address list
You can define endpoints that should be ignored by all Policies and Discovery rules, for example, a set of network servers that should not be included in inspection.
Note: From eyeSight v8.4, the Forescout Admin (REST) API provides you with automatic configuration capabilities for managing deployments on the eyeSight, where network entities, such as the segment tree and default groups ranges, can change on a daily basis. The Admin API allows you to integrate third-party network management IPAM (IP Address Management) tools, such as Infoblox and BlueCat, and ensures that segments defined on the eyeSight are synchronized with their latest IPAM database definitions. For more information, see Work with the Forescout Admin API in the Admin API Plugin Configuration Guide.
To ignore endpoints for specific policies, create policy exceptions or narrow the policy scope.
Endpoints added to this group are included in Threat Protection and Virtual Firewall policy inspections.
You can filter the view in the Filters pane according to ignored IP addresses.
The following options are available for creating ignored IP addresses:
- Add individual endpoints or import lists of endpoints using the Ignored IP Manager. See Import and Export Group Members.
- By using the Add to Group feature. See Add to Group for details.
minute read