Network Exclusions

For a network scan, AppViewX lets you create a list of network sources that have to be excluded from the scans. This list is called an exclusion list and it is made of IP addresses and/or subnets that have to be excluded from a network discovery scan. Exclusion lists are different from rules; while rules let you exclude IP addresses after a discovery operation is completed, an exclusion list will do the same thing but before the discovery operation is triggered.

Creating an Exclusion List

  1. Go to (Menu) > CERT+ > CERTIFICATE DISCOVERY > Discovery Configuration > Excluded Networks.
    The Excluded Networks page is displayed.
  2. Click + Create.
    The Add page is displayed.
  3. Enter/Select the exclusion list details.
    Important: Maximum of 5000 exclusion list is allowed.
    Table 1. Field descriptions for the exclusion list details
    Field Description
    *Excluded IP Name Enter a name for the exclusion list.
    Important: This field does not support special characters.
    Description Add a short description with the reason to be excluded.
    Network Setting Select a network setting to enforce this excluded network across all associated networks. The available options are:
    • All
    • Custom.
    *Select Settings Select the network settings that applies to this entry.
    Note: This field appears when Network Setting = Custom.
    *Exclusion By From the dropdown list, from the following options, select the source of the exclusion list:
    • Custom: Lets you enter a list of the IP addresses and/or subnets to be excluded from the network scan
    • Upload: Lets you upload a file that has the IP addresses and/or subnets to be excluded from the network scan

      Acceptable file formats: .xlsx, .xls, .csv

      Important: To view a sample exclusion list file:
      1. From this dropdown list, select Upload.

        The Upload File field is displayed.

      2. From below the Upload File field, click Download Sample Template.

        The sample template will be downloaded to your system.
    *Exclude List This field is displayed if Exclusion By = Custom.

    Enter a valid IP address, subnet, IP range, or a combination of these network sources for exclusion from all network discovery scan(s).

    Listed below are examples of valid values:
    • Sample value for IP address: 192.168.1.1
    • Sample value for subnet: 192.168.1.1/24
    • Sample value for a range of IP addresses: 192.168.1.1 – 192.168.1.10
    *Browse This field is displayed if Exclusion By = Upload.
    To upload a .xlsx/.xls/.csv file that has the exclusion list:
    1. Click Upload.
    2. Navigate to the location of the file.
    3. Select the required file.
    4. Click Open.
    Important: To view a sample exclusion list file:
    1. From below the Upload File field, click Download Sample Template.

      The sample template will be downloaded to your system.
    *: Mandatory fields
  4. Click Add.
    The table below the fields is populated with entries from the Exclusion List/file uploaded with the exclusion list.
  5. Click Save.
    If an excluded IP address/subnet was previously discovered and is already part of the inventory, the current discovery operation will not change that. If required, you can manually delete the corresponding certificates from the inventory.

Disabling an Exclusion List

By default, exclusion lists are enabled as soon as they are created. Which means that when a network discovery operation is triggered, the results will exclude all the network sources that are a part of the exclusion lists. You can choose to disable an execution list so that it is not considered for the subsequent network discovery scans.

Additionally, you can enable selected disabled exclusion lists for a specific scan at the time of configuring the scan, by selecting the required list(s) from the Exclusion Lists dropdown list.

To disable an exclusion list:

  1. Go to (Menu) > CERT+ > CERTIFICATE DISCOVERY > Discovery Configuration > Excluded Networks.
    The Excluded Networks page is displayed.
  2. From the exclusion list inventory, under Status, move the radio button to left that you want to disable.
    The confirmation dialog box appears as Excluded Netwrok Successfully Disabled.

Enabling an Exclusion List

To enable an exclusion list after it has been disabled:

  1. Go to (Menu) > CERT+ > CERTIFICATE DISCOVERY > Discovery Configuration > Excluded Networks.
    The Excluded Networks page is displayed.
  2. From the exclusion list inventory, under Status, move the radio button to right that you want to enable.
    The confirmation dialog box appears as Excluded Netwrok Successfully Enabled.

Deleting an Execution List

  1. Go to (Menu) > CERT+ > CERTIFICATE DISCOVERY > Discovery Configuration > Excluded Networks.
    The Excluded Networks page is displayed.
  2. From the exclusion list inventory, under Exclude Network, select the checkbox(es) corresponding to the exclusion list(s) you want to delete.
  3. From the menu bar, click .
  4. From the confirmation dialog box, click Submit.
    The selected exclusion list(s) are deleted.