Skip to main content
cysaw
Staff & Editor
cysaw
Staff & Editor
October 2, 2024

Technical Tip: Source IP for the ML configuration in the FortiNDR Center mode

  • October 2, 2024
  • 0 replies
  • 258 views
Description This article describes how to use the Source IP for the ML configuration in the FortiNDR Center mode
Scope

FortiNDR.
Solution
  1. The source IP group means that it will only detect anomalies within the configured IP range. For any IP outside of the configured source IP group, it will not trigger the anomalies detection.


cysaw_0-1727843650635.png

 

  1. Configuring the source IP group for ML configuration will reduce unnecessary anomalies from the network to only focus on the critical anomalies.
  2. If the source IP for the ML configuration is not configured, the FortiNDR will detect all the anomalies from the network.
    Terms & ConditionsAccessibility statement