Configuration wizard – company network

After you select the company network template, the wizard guides you through all necessary initial settings. The system uses these values for relevant detection method parameters. Follow the wizard's instructions to ensure correct system configuration and more precise anomaly detection.

Initial configuration

Click Start to begin configuration by selecting your company's approximate size. You will then need to enter:

• IP addresses of your LAN (beyond the automatically-added general private ranges)
• Public IP ranges
• IP addresses of local servers
• Specific IP addresses for SMTP, DNS, DHCP, NTP, and proxy servers

You can enter individual IP addresses or ranges using the notation described in the user guide in the Filters section (for example, 10.0.0.0/24, 10.0.0.[1-10], 172.16.*.1, 192.168.{1,3,20}.1).

Server configuration

When entering local servers, add IP addresses for all servers in your network, including:

• DHCP, DNS, SMTP, and NTP servers
• Monitoring systems like Zabbix
• Database servers
• Proxies
• Other server types

The wizard will prompt you to define specific server types in subsequent steps.

When entering specific server IP addresses (SMTP, DNS, Proxy, DHCP, or NTP), include addresses of servers that users can access (for example, public DNS servers like 8.8.8.8 if your company policy allows their use).

Network size configuration

When entering the approximate number of hosts, include all end devices in your network (computers, printers, and so on). Flowmon ADS sets threshold values for detection methods based on this number.

External services configuration

External services include updates for blacklists and behavior patterns used to detect malicious network communications and anomalies. These services also include public information lookup services such as WHOIS, IPVoid, and others. Select Yes if your system has Internet access.

Completing the configuration

Flowmon ADS is now configured. The system has loaded all your entered data into filters and event detection methods. Click Back to ADS to finish the configuration wizard. Your next step is to configure data feeds.