IP geolocation database not up to date for F5

Vendor

F5

Description

Indeni will alert when the IP geolocation database hasn't been updated in a while.

Remediation Steps

This data is not automatically updated and requires manual updates using packages from download.f5.com. Follow https://support.f5.com/csp/#/article/K11176

How does this work?

This alert logs into the F5 load balancer and retrieves the current version of the geo-ip database.

Why is this important?

The geo-ip database provides meta data related to an IP address, such as city, region, country and ISP. Should this data be old or stale it could affect decisions taken based on geo-ip data in a negative way. For instance, a client might be refused access to critical services because his or her IP belongs to the wrong country.

Without Indeni how would you find this?

To check the data base version, first log in to the unit with SSH. Then list the available files in "/shared/GeoIP". For each file, issue the following command: "geoip_lookup -f /shared/GeoIP/ ". Example: "geoip_lookup -f /shared/GeoIP/F5GeoIP.dat 8.8.8.8". Note the version informantion to determine the issue data of the database file. Example: "version = GEO-148 20170105" was issued 5th of January 2017.

View Source Code
single