Subnet list for reports 6.4.3

This new feature offers flexibility of filtering where specific subnets need to be included/excluded from reports.

To configure subnet list for reports in the GUI:

1. Go to FortiSoC > Handlers > Subnet List and click Create New. Create a new Subnet and Subnet Group:
   
   1. To create a subnet, click Subnet, enter a name, and select a Type. Subnet Notation, IP Range, and Batch Add are supported.
      
   2. To create a subnet group, click Subnet Group, enter a name, and select the subnet entries.
      
2. Go to Reports > All Reports, select a report, and click Edit.
   On the Settings tab you can see the Subnets setting which includes the options for All Subnets and Specify.
   
   • When All Subnets is selected, subnet and subnet groups are not specified and there is no filtering on srcip or dstip log fields based on subnets.
     
   • When Specify is selected, the Include Subnets and Exclude Subnets options become available. You can specify which subnets and/or subnet groups are included and/or excluded from the list of available entries.
     
3. After the report settings are defined, run the report and check the results.
   Any logs with a srcip or dstip within the specified subnets are checked as analytical data for this report.
   
   Defined subnet information for included and excluded subnets is displayed in the report as Appendix B.