Geo IP reliable enugh?

[Vincent_Bacher]

Hi mates,

As our executives have requested it, I would like to gather some experience reports regarding the reliability of CP Geo IP data when using updatable objects.

Has anyone experienced complaints about incorrect country assignments for IP addresses? Or have the assignments generally been accurate?

Any experiences or feedback would be greatly appreciated.

thanks

Vince

[Lesley · Accepted solution]

I have couple customers. False positive can happen, if it happens you need to open TAC case. But I don't recall the last time I did that. The IP information comes from a third party. If you need to whitelist you have to do it yourself by making a bypass for the problematic IP. If you want it to be flagged correctly SR is needed. So yes it works, is it 100%, no but all extra tools can help in a better security

Make sure you do not use legacy geo protection. 

[the_rock · Accepted solution]

Hey Vince,

I totally agree with @Lesley here. I also have not had many resports about false positives in the past (maybe 3 or 4), but opening TAC case usually takes care of it quickly.

maxmind.com is very reliable as far as those things.

[Bob_Zimmerman · Accepted solution]

Nobody has complained while my company has used updatable objects, so the geolocation is good enough for us. Currently dealing with a Cloudflare address showing up as Russian some of the time and USAian some of the time. Even two different views of exactly the same log entry seem to disagree on where it is. We only noticed it when proactively poking through geolocation drops recently.

I recommend building rules based on geolocations in a separate ordered layer. This makes it easier and safer to add exceptions should they be needed, since your normal firewall rules will still be applied to them.

[CaseyB · Accepted solution]

We have not had any reports with outbound Geo Blocking being incorrect.

Inbound has been reliable in the terms of people going on vacation, reporting they cannot get logged in and the Geo Blocking accurately has picked up their vacation spot, which is blocked on purpose.

We have been using the updatable objects for a little over 3 years, no complaints.

[Vincent_Bacher]

Thanks all for your feedback. No complaints sounds good. We will talk bit more about that and decide.
Again, thanks all, much appreciated.