← Help center

LAN ranges and agent scope

Allowed ranges

When generating the enrollment command, you define the CIDR ranges the agent is allowed to scan (e.g. 10.0.0.0/24, 192.168.1.0/24).

These ranges also appear in the Targets hub (LAN ranges section) once the agent is online. Only addresses within the declared scope are analyzed; this protects the rest of your network.

To change the scope, regenerate a command or adjust the configuration from Settings → Local agent. Each destination counts toward your target quota according to billing rules (one range is counted per IP address).