This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Privacy Policy. Click Preferences to customize your cookie settings.
Accept
Reject
Preferences
ABOUT CHECKMATES CYBER SECURITY COMMUNITY & FAQ
Help

Who rated this post

cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
the_rock
MVP Diamond
MVP Diamond
‎2025-11-06 12:50 PM

Hi Jenn,

I verified this with TAC and they confirmed that all that message says is that gateway's IPToCountry.csv file contains more ranges that what kernel parameter sllows, so its totally safe to change it to something higher, no issues.

Here is an example in my lab:

[Expert@CP-GW:0]# fw ctl get int geo_max_ip_ranges
geo_max_ip_ranges = 300000
[Expert@CP-GW:0]# fw ctl set -f int geo_max_ip_ranges 500000
"fwkern.conf" was updated successfully
[Expert@CP-GW:0]# more /opt/CPsuite-R82/fw1/boot/modules/fwkern.conf
sip_forward_if_needed=1
geo_max_ip_ranges=500000
[Expert@CP-GW:0]#

Best,
Andy
"Have a great day and if its not, change it"

View solution in original post

(1)
Who rated this post