You can add, modify, and delete networks in the platform using the Classless Inter-Domain Routing (CIDR)IDR format. The
system identifies network subnets to help Google Security Operations SOAR recognize internal assets and consider network sensitivity during playbook execution.
An entity with a set IP address appears as anInternal Entityon theCasespage and has theisInternal:Truefield.
To manage multiple networks, you have two options:
Use theExportandImportfunctions.
Download a template, add your network information to it, and then import it. This is particularly helpful for new customers who want to quickly add existing data to the platform.
To add a new network, follow these steps:
Go toSettings>Environments>Networks.
ClickaddAdd.
In theNew Network dialog, add the relevant information. ThePriorityfunction
determines the order of the networks. If an entity matches several ranges, the system selects the one with the highest priority.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-09-04 UTC."],[[["\u003cp\u003eYou can manage networks within the Google SecOps platform by adding, modifying, and deleting them in CIDR format, which enables the identification of network subnets and internal assets.\u003c/p\u003e\n"],["\u003cp\u003eNetwork names are displayed in Cases and Reports to enhance readability, and entities with assigned IP addresses will be clearly identified as internal.\u003c/p\u003e\n"],["\u003cp\u003eThe system allows for the import and export of multiple networks, and provides a downloadable template for efficient data entry, especially beneficial for new users.\u003c/p\u003e\n"],["\u003cp\u003eWhen adding a new network, you can set the priority, and the system will automatically assign entities to the smallest matching network range with the highest priority.\u003c/p\u003e\n"]]],[],null,["Manage networks \nSupported in: \nGoogle secops [SOAR](/chronicle/docs/secops/google-secops-soar-toc) \n\nYou can add, modify, and delete networks in the platform using the Classless Inter-Domain Routing (CIDR)IDR format. The\nsystem identifies network subnets to help Google Security Operations SOAR recognize internal assets and consider network sensitivity during playbook execution.\n\nNetwork management and display\n\nNetwork names appear in **Cases** and **Reports** for readability.\n\nAn entity with a set IP address appears as an **Internal Entity** on the **Cases** page and has the `isInternal:True` field.\n\nTo manage multiple networks, you have two options:\n\n- Use the **Export** and **Import** functions.\n- Download a template, add your network information to it, and then import it. This is particularly helpful for new customers who want to quickly add existing data to the platform.\n\nTo add a new network, follow these steps:\n\n1. Go to **Settings \\\u003e Environments \\\u003e Networks**.\n2. Click add **Add**.\n3. In the **New Network dialog** , add the relevant information. The **Priority** function determines the order of the networks. If an entity matches several ranges, the system selects the one with the highest priority.\n4. Click **Add**.\n\n| **Note:** The system matches an entity to the smallest network that fits, even when users add sub-networks with smaller ranges.\n\n**Need more help?** [Get answers from Community members and Google SecOps professionals.](https://security.googlecloudcommunity.com/google-security-operations-2)"]]
