Networks are ArcSight resources that are used to differentiate between zones whose IP ranges overlap, such as when branch locations assign the same private address spaces to resources used in other corporate locations.
The system comes configured with two standard networks: /All Networks/ArcSight System/Local
and /All Networks/ArcSight System/Core/Global
. The Local
network is where you add your custom zones. Zone mappings in the Local
network override the default zone mappings provided by the Global network.
The Global
network provides default zone mapping if no local networks are defined, and automatically provides the correct addressing information to ArcSight SmartConnectors when they are installed.
Custom networks are also used to compartmentalize Customer
designations in MSSP situations.
When you associate a customer or a location with a network in the Network Editor, zones automatically access this information. (See Managing Networks.)