Using country updatable objects but no in.geod process

[Jose_Luis_Mart1]

Hi all.

A few days ago I configured country updatable objects for a geolocation rule following sk126172.

The rule I created is getting matches and seems to be working fine, but...

- There's no in.geod process running on the gateways

- There's no IPtocountry.csv file on the FW tmp directory

- I've been looking for maxmind IP addresses on the log file to see if connection to it from the gateways is blocked but nothing

So I'm afraid the rule is working but using the old, "factory" file from the Management.

What could I do to try to start the in.geod process? I just followed the sk and installed policy. Is a cpstop/cpstart needed?

[G_W_Albrecht]

Have a look here first: https://community.checkpoint.com/t5/Management/R81-geo-policy/td-p/110671

[Jose_Luis_Mart1]

Hi! Thanks, but I saw to reference to my problem 😕

[PhoneBoy]

in.geod and IpToCountry.csv is only relevant to the legacy method for Geo Protection.
That said it is still used on the management to show what country is relevant for the log.
The file has to be updated manually using something like: https://community.checkpoint.com/t5/API-CLI-Discussion/One-liner-to-update-IpToCountry-data-on-Secur...

[Jose_Luis_Mart1]

It seems so! 🙂 TAC hasn't mentioned this, but they've made me check a complete set of files and logs not mentioned on that sk and they look good:

$FWDIR/log/updatable_objects/online_services_package_status.elg 

Time: Mon Oct 25 13:11:17 2021

Package: /opt/CPshrd-R80.20/database/downloads/ONLINE_SERVICES/1.0/251021092135

Load Status: SUCCESS

Time: Mon Oct 25 15:43:59 2021

Package: /opt/CPshrd-R80.20/database/downloads/ONLINE_SERVICES/1.0/251021092135

Load Status: SUCCESS

Time: Mon Oct 25 19:13:22 2021

Package: /opt/CPshrd-R80.20/database/downloads/ONLINE_SERVICES/1.0/251021092135

Load Status: SUCCESS

Time: Tue Oct 26 01:13:34 2021

Package: /opt/CPshrd-R80.20/database/downloads/ONLINE_SERVICES/1.0/251021212133

Load Status: SUCCESS