IP geolocation database not up to date for F5

Vendor

F5

Description

Indeni will alert when the IP geolocation database hasn't been updated in a while.

Remediation Steps

This data is not automatically updated and requires manual updates using packages from download.f5.com. Follow https://support.f5.com/csp/#/article/K11176

How does this work?

This alert logs into the F5 load balancer and retrieves the current version of the geo-ip database.

Why is this important?

This alert logs into the F5 load balancer and retrieves the current version of the geo-ip database.

Without Indeni how would you find this?

To check the data base version, first log in to the unit with SSH. Then list the available files in "/shared/GeoIP". For each file, issue the following command: "geoip_lookup -f /shared/GeoIP/ ". Example: "geoip_lookup -f /shared/GeoIP/F5GeoIP.dat 8.8.8.8". Note the version informantion to determine the issue data of the database file. Example: "version = GEO-148 20170105" was issued 5th of January 2017.


View Source Code