topic Remove country flags for specific networks in Firewall & Security Management

Remove country flags for specific networks

Christoph — Wed, 30 Sep 2020 07:42:43 GMT

Hi,
historically a customer has a few internal networks in use, that do use official IP address space. There is no chance he can get rid of them in the foreseeable future (hard to reconfigure industrial machines).

The problem at this point is, while technically everything is working fine, the logs are harder to read, as all these networks do show up as their corresponding countries with their respective country flag.

So my question is, can I exclude custom networks from having assigned a country flag?

sk106216 offers a "solution" for the other way around, by editing and adding an entry to ip2country.csv.

So obviously removing an entry will probably yield a solution to my problem, with the caveat, that this file sometimes gets updated, which would remove my changes. I could set this file read only, but then I wouldn't get any updates.

Maybe someone has had a similar problem and knows of a solution.

Cheers
Christoph

Re: Remove country flags for specific networks

G_W_Albrecht — Wed, 30 Sep 2020 08:18:07 GMT

According to sk120261: Geo Protection logs show the wrong country flag:

The ip2country.csv file on Security Management / Multi-Domain Management / SmartEvent is not updated automatically.

Re: Remove country flags for specific networks

Christoph — Wed, 30 Sep 2020 08:54:03 GMT

I don't want to show the correct country flag, I want to show no country flag. The correct country flag is incorrect in my use case.

Edit: Thank you, I missed the auto-update sentence, which is not happening on the Management Server. This looks like the solution then.

Re: Remove country flags for specific networks

G_W_Albrecht — Wed, 30 Sep 2020 08:58:32 GMT

Yep, i thought of just removing the ranges used by the customer. And - as needed with other files - you could also change it to ReadOnly 8)...