topic Re: Updateable object Geo-Location wrong Telia Ip address in General Topics

Updateable object Geo-Location wrong Telia Ip address

skandshus — Mon, 12 Dec 2022 20:34:33 GMT

I am seeing ISP owned Ip adresses from Telia which all of the sudden is being flagged as swedish even though they are supplied by the danish part of the ISP

https://whatismyipaddress.com/ip/62.199.210.98

does anybody know where that's supposed to be reported? i could create a TAC case, but it seems like a big thing

Re: Updateable object Geo-Location wrong Telia Ip address

G_W_Albrecht — Mon, 12 Dec 2022 21:18:26 GMT

No, that is the correct way. Otherwise correction could take longer as CP uses Maxmind but updates less often. See sk126172: Configuring Geo Policy using Updatable Objects in R80.20 and higher

Re: Updateable object Geo-Location wrong Telia Ip address

the_rock — Mon, 12 Dec 2022 21:59:14 GMT

I went on 7 different geo location sites and ALL of them report it as Denmark.

Re: Updateable object Geo-Location wrong Telia Ip address

Danny — Mon, 12 Dec 2022 22:04:01 GMT

Update your IP2Country database with this one-liner.

Re: Updateable object Geo-Location wrong Telia Ip address

skandshus — Mon, 12 Dec 2022 22:33:29 GMT

alright

Re: Updateable object Geo-Location wrong Telia Ip address

skandshus — Mon, 12 Dec 2022 22:33:48 GMT

That's what im seeing too but the smartconsole doesnt

Re: Updateable object Geo-Location wrong Telia Ip address

skandshus — Mon, 12 Dec 2022 22:41:18 GMT

when it doe the one-liner it output's "Updating Iptocountry requires CPSTOP! Executing?

anything i press after that makes it say "abort! and then it doesnt look like anything is happening^

Edit: nevermind. Enter was the secret magic button to press, now it started running.. guess ill know in a few minutues if the update corrected it from Swedish to Danish adresse location 🙂

Re: Updateable object Geo-Location wrong Telia Ip address

skandshus — Mon, 12 Dec 2022 22:39:20 GMT

Re: Updateable object Geo-Location wrong Telia Ip address

skandshus — Mon, 12 Dec 2022 22:48:37 GMT

It did update though, but the problem is still there, showing a swedish flag= blocking traffic originating from those ip if i filter on source and set danish ip adresses

Re: Updateable object Geo-Location wrong Telia Ip address

the_rock — Mon, 12 Dec 2022 23:15:17 GMT

I guess you can always make an exception for that IP address if needed, but to change it to show as Denmark (great country btw :)), which it should, then it may warrant TAC case, as every website I found shows it correctly.

Re: Updateable object Geo-Location wrong Telia Ip address

Danny — Tue, 13 Dec 2022 06:32:38 GMT

Regarding to MaxMind, it's Denmark.

As Check Point relies on MaxMind, Check Point should show Denmark, too.

You can verify on your Management that your IP2Country database is up-to-date with our ccc script.

Your gateways should update themself automatically every 2 hours, if not check sk84801.

However, you can always investigate deeper by looking into the IP2Country files yourself.

On management:

Re: Updateable object Geo-Location wrong Telia Ip address

G_W_Albrecht — Tue, 13 Dec 2022 08:05:50 GMT

Open a TAC case - this is the typical issue, CP lagging behind with its weekly update and keeping wrong info...

Re: Updateable object Geo-Location wrong Telia Ip address

_Val_ — Tue, 13 Dec 2022 08:17:32 GMT

Is it resolved for you now, or do you still need assistance?

Re: Updateable object Geo-Location wrong Telia Ip address

_Val_ — Tue, 13 Dec 2022 09:51:08 GMT

Please open a TAC case and let them fix it.

Re: Updateable object Geo-Location wrong Telia Ip address

the_rock — Tue, 13 Dec 2022 11:25:36 GMT

Im trying to think logically how I could verify this in my own R81.10 or R81.20 lab in the logs, since I will never see this IP in smart console logs, as Im in Canada and we would not be "associated"with this IP address, for the lack of the better term...I did run command @Danny provided and it does indeed show Denmark.