Filter Logs by geo location

[peter_schumache]

Is there a way to filter my Check Point logs e.g. Destination IP by Geo-Location?

[Wolfgang · Accepted solution]

Peter,

you can simple type the country name in english in the search field. (Australia, Germany, China, Ghana etc.)

Wolfgang

[Raj_Khatri]

While a country search works in the search field, is there a way to get more granular?  ie: by source or destination?

[Dror_Aharony]

Simply filter by both src/dst_country & src/dst too.

example:

src_country:"Israel" AND src:1.2.3.4.

[Terri_Hawkins]

Thanks for this! I did not know and I have been trying forever to do a search by country!  

[Vladimir_S]

I also looked into your question. Here’s my example, and it worked very well.

"Italy" and dst: xxx.xxx.xxx.0 /24

xxx.xxx.xxx.0 /24 - It's my external IP range.