White list address range Cisco Firepower Management Center

[ziqex]

Hello everyone,

I wanted to white list the range of ip addresses, a few blocks, some /25 and some /26.

In security intelligence - network list and feeds I have white list list/feed where I add specific IP that I want to white list (download list, update and upload).

I used to always include public addresses rather than IP ranges, my question is if adding the range in the following format X.X.X.X/25 or Y.Y.Y.Y/26 below other entries in the .txt files would whitelist the required ranges.

What I noticed is that after uploading the txt file with added ranges the Number of IPs updated from 19 to 29 however I have added 10 ip ranges therefore total number of IPs should be higher. 

Thank you.

Regards,

Daniel

[Marvin Rhoads]

Yes you can upload the file with the addresses in the format you mentioned. I'm not following exactly what other question you are asking.

[ziqex]

I was wondering if adding the addresses in the below format to white list is correct.

X.X.X.X/26 , Y.Y.Y.Y/25 , Z.Z.Z.Z/24

I attached two files before and after uploading the new fxt file with addresses.

I have added ten networks in total, 5 times /26,  4 times /25, 1 time /24.

Number of IPs has only increased by 10.

Does it not take into consideration all IPs per network added?

Thank you.

Regards,

Daniel

[Marvin Rhoads · Accepted solution]

A host address, network address or address range each count as one "IP" for purposes of the display you shared. So the system is operating correctly.