You can add, modify, and delete networks in the platform using the Classless Inter-Domain Routing (CIDR)IDR format. The
system identifies network subnets to help Google Security Operations SOAR recognize internal assets and consider network sensitivity during playbook execution.
Network management and display
Network names appear in Cases and Reports for readability.
An entity with a set IP address appears as an Internal Entity on the Cases page and has the isInternal:True field.
To manage multiple networks, you have two options:
Use the Export and Import functions.
Download a template, add your network information to it, and then import it. This is particularly helpful for new customers who want to quickly add existing data to the platform.
To add a new network, follow these steps:
Go to Settings > Environments > Networks.
Click
add
Add.
In the New Network dialog, add the relevant information. The Priority function
determines the order of the networks. If an entity matches several ranges, the system selects the one with the highest priority.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-09-04 UTC."],[[["\u003cp\u003eYou can manage networks within the Google SecOps platform by adding, modifying, and deleting them in CIDR format, which enables the identification of network subnets and internal assets.\u003c/p\u003e\n"],["\u003cp\u003eNetwork names are displayed in Cases and Reports to enhance readability, and entities with assigned IP addresses will be clearly identified as internal.\u003c/p\u003e\n"],["\u003cp\u003eThe system allows for the import and export of multiple networks, and provides a downloadable template for efficient data entry, especially beneficial for new users.\u003c/p\u003e\n"],["\u003cp\u003eWhen adding a new network, you can set the priority, and the system will automatically assign entities to the smallest matching network range with the highest priority.\u003c/p\u003e\n"]]],[],null,["Manage networks \nSupported in: \nGoogle secops [SOAR](/chronicle/docs/secops/google-secops-soar-toc) \n\nYou can add, modify, and delete networks in the platform using the Classless Inter-Domain Routing (CIDR)IDR format. The\nsystem identifies network subnets to help Google Security Operations SOAR recognize internal assets and consider network sensitivity during playbook execution.\n\nNetwork management and display\n\nNetwork names appear in **Cases** and **Reports** for readability.\n\nAn entity with a set IP address appears as an **Internal Entity** on the **Cases** page and has the `isInternal:True` field.\n\nTo manage multiple networks, you have two options:\n\n- Use the **Export** and **Import** functions.\n- Download a template, add your network information to it, and then import it. This is particularly helpful for new customers who want to quickly add existing data to the platform.\n\nTo add a new network, follow these steps:\n\n1. Go to **Settings \\\u003e Environments \\\u003e Networks**.\n2. Click add **Add**.\n3. In the **New Network dialog** , add the relevant information. The **Priority** function determines the order of the networks. If an entity matches several ranges, the system selects the one with the highest priority.\n4. Click **Add**.\n\n| **Note:** The system matches an entity to the smallest network that fits, even when users add sub-networks with smaller ranges.\n\n**Need more help?** [Get answers from Community members and Google SecOps professionals.](https://security.googlecloudcommunity.com/google-security-operations-2)"]]
