Updateable object Geo-Location wrong Telia Ip address

[skandshus]

I am seeing ISP owned Ip adresses from Telia which all of the sudden is being flagged as swedish even though they are supplied by the danish part of the ISP

https://whatismyipaddress.com/ip/62.199.210.98

does anybody know where that's supposed to be reported? i could create a TAC case, but it seems like a big thing

[G_W_Albrecht]

No, that is the correct way. Otherwise correction could take longer as CP uses Maxmind but updates less often. See sk126172: Configuring Geo Policy using Updatable Objects in R80.20 and higher

[skandshus]

alright

[the_rock]

I went on 7 different geo location sites and ALL of them report it as Denmark.

[skandshus]

That's what im seeing too but the smartconsole doesnt

[the_rock]

I guess you can always make an exception for that IP address if needed, but to change it to show as Denmark (great country btw :)), which it should, then it may warrant TAC case, as every website I found shows it correctly.

[Danny]

Update your IP2Country database with this one-liner.

[skandshus]

when it doe the one-liner it output's "Updating Iptocountry requires CPSTOP! Executing?

anything i press after that makes it say "abort! and then it doesnt look like anything is happening^

Edit: nevermind. Enter was the secret magic button to press, now it started running.. guess ill know in a few minutues if the update corrected it from Swedish to Danish adresse location 🙂

[skandshus]

It did update though, but the problem is still there, showing a swedish flag= blocking traffic originating from those ip if i filter on source and set danish ip adresses

[G_W_Albrecht]

Open a TAC case - this is the typical issue, CP lagging behind with its weekly update and keeping wrong info...

[_Val_]

Please open a TAC case and let them fix it.

[skandshus]

[Danny]

Regarding to MaxMind, it's Denmark.

As Check Point relies on MaxMind, Check Point should show Denmark, too.

You can verify on your Management that your IP2Country database is up-to-date with our ccc script.

Your gateways should update themself automatically every 2 hours, if not check sk84801.

However, you can always investigate deeper by looking into the IP2Country files yourself.

On management:

[the_rock]

Im trying to think logically how I could verify this in my own R81.10 or R81.20 lab in the logs, since I will never see this IP in smart console logs, as Im in Canada and we would not be "associated"with this IP address, for the lack of the better term...I did run command @Danny provided and it does indeed show Denmark. 

[_Val_]

Is it resolved for you now, or do you still need assistance?