Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Jose_Luis_Mart1
Explorer

Using country updatable objects but no in.geod process

Hi all.

A few days ago I configured country updatable objects for a geolocation rule following sk126172.

The rule I created is getting matches and seems to be working fine, but...

- There's no in.geod process running on the gateways

- There's no IPtocountry.csv file on the FW tmp directory

- I've been looking for maxmind IP addresses on the log file to see if connection to it from the gateways is blocked but nothing

So I'm afraid the rule is working but using the old, "factory" file from the Management.

What could I do to try to start the in.geod process? I just followed the sk and installed policy. Is a cpstop/cpstart needed?

0 Kudos
4 Replies
G_W_Albrecht
Legend
Legend

Have a look here first: https://community.checkpoint.com/t5/Management/R81-geo-policy/td-p/110671

 

CCSE CCTE SMB Specialist
0 Kudos
Jose_Luis_Mart1
Explorer

Hi! Thanks, but I saw to reference to my problem 😕

0 Kudos
PhoneBoy
Admin
Admin

in.geod and IpToCountry.csv is only relevant to the legacy method for Geo Protection.
That said it is still used on the management to show what country is relevant for the log.
The file has to be updated manually using something like: https://community.checkpoint.com/t5/API-CLI-Discussion/One-liner-to-update-IpToCountry-data-on-Secur...

0 Kudos
Jose_Luis_Mart1
Explorer

It seems so! 🙂 TAC hasn't mentioned this, but they've made me check a complete set of files and logs not mentioned on that sk and they look good:

$FWDIR/log/updatable_objects/online_services_package_status.elg 

 

Time: Mon Oct 25 13:11:17 2021

Package: /opt/CPshrd-R80.20/database/downloads/ONLINE_SERVICES/1.0/251021092135

Load Status: SUCCESS

 

Time: Mon Oct 25 15:43:59 2021

Package: /opt/CPshrd-R80.20/database/downloads/ONLINE_SERVICES/1.0/251021092135

Load Status: SUCCESS

 

Time: Mon Oct 25 19:13:22 2021

Package: /opt/CPshrd-R80.20/database/downloads/ONLINE_SERVICES/1.0/251021092135

Load Status: SUCCESS

 

Time: Tue Oct 26 01:13:34 2021

Package: /opt/CPshrd-R80.20/database/downloads/ONLINE_SERVICES/1.0/251021212133

Load Status: SUCCESS

0 Kudos