What are the network requirements for Symantec Integrated Cyber Defense Exchange (ICDx)?
ICDx requires all Symantec products to be on the same network segment/subnet for inbound connectors. All products that ICDx forwards to, including Splunk, etc. must also be on the same network segment/subnet. For more information please see the ICDx administration guide.