The last Geo Location update on Quantum Security Gateways appears to have an error.
[Expert@fw:0]# ls -la $CPDIR/database/downloads/ONLINE_SERVICES/1.0/150622030521/geo_location.C
Jun 14 17:02 /opt/CPshrd-R81/database/downloads/ONLINE_SERVICES/1.0/150622030521/geo_location.C
A newer update for updatable objects (sk121877) is currently not available.
Multiple customers report that regional IP addresses are blocked as they are wrongly located in Russia.
MaxMind correcty shows them as regional IP addresses in Germany but Check Point Quantum Security Gateways do not.
Example: 92.217.8.19
MaxMind shows: Munich, Germany
Check Point shows the IP within a big block for Russia within geo_location.C:
:CP_GEO_RU (
:parent ()
:uuid ("909383a0-c34b-49ef-b423-c0168a37c37d")
:display_name ("Russia")
:icon ("@app/cp_geo_ru")
:IPV4 (
: (
:from ("91.228.62.0")
:to ("92.228.64.255")
:type (ip_range)
)
[Expert@fw:0]# dynamic_objects -lo CP_GEO_RU | grep 92.228.
range : 91.228.62.0 - 92.228.64.255