topic Re: Using country updatable objects but no in.geod process in Firewall and Security Management

Using country updatable objects but no in.geod process

Jose_Luis_Mart1 — Mon, 25 Oct 2021 07:17:32 GMT

Hi all.

A few days ago I configured country updatable objects for a geolocation rule following sk126172.

The rule I created is getting matches and seems to be working fine, but...

- There's no in.geod process running on the gateways

- There's no IPtocountry.csv file on the FW tmp directory

- I've been looking for maxmind IP addresses on the log file to see if connection to it from the gateways is blocked but nothing

So I'm afraid the rule is working but using the old, "factory" file from the Management.

What could I do to try to start the in.geod process? I just followed the sk and installed policy. Is a cpstop/cpstart needed?

G_W_Albrecht — Mon, 25 Oct 2021 07:27:49 GMT

Jose_Luis_Mart1 — Mon, 25 Oct 2021 07:39:35 GMT

Hi! Thanks, but I saw to reference to my problem 😕

PhoneBoy — Mon, 25 Oct 2021 18:09:49 GMT

in.geod and IpToCountry.csv is only relevant to the legacy method for Geo Protection.
That said it is still used on the management to show what country is relevant for the log.
The file has to be updated manually using something like: https://community.checkpoint.com/t5/API-CLI-Discussion/One-liner-to-update-IpToCountry-data-on-Security-Managements/m-p/97922#M5202

Jose_Luis_Mart1 — Tue, 26 Oct 2021 12:39:21 GMT

It seems so! 🙂 TAC hasn't mentioned this, but they've made me check a complete set of files and logs not mentioned on that sk and they look good:

$FWDIR/log/updatable_objects/online_services_package_status.elg

Time: Mon Oct 25 13:11:17 2021

Package: /opt/CPshrd-R80.20/database/downloads/ONLINE_SERVICES/1.0/251021092135

Load Status: SUCCESS

Time: Mon Oct 25 15:43:59 2021

Package: /opt/CPshrd-R80.20/database/downloads/ONLINE_SERVICES/1.0/251021092135

Load Status: SUCCESS

Time: Mon Oct 25 19:13:22 2021

Package: /opt/CPshrd-R80.20/database/downloads/ONLINE_SERVICES/1.0/251021092135

Load Status: SUCCESS

Time: Tue Oct 26 01:13:34 2021

Package: /opt/CPshrd-R80.20/database/downloads/ONLINE_SERVICES/1.0/251021212133

Load Status: SUCCESS