Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Suggested Answer
  • Replies 3 replies
  • Answers 2 answers
  • Subscribers 41 subscribers
  • Views 486 views
  • Users 0 members are here
Options
Suggested

Problems with IP Geolocation

TW98

Hello Sophos,

As an Internet provider, we have had extreme problems with geolocation in recent weeks. As we have now found out, this mainly affects services and applications that use a Sophos firewall. Our IP addresses are probably recognised here as Israel.

Which database is being referred to? Is it possible to store a geofeed file with Sophos?

Do any lists have to be updated manually in the firewalls for the adjustments of geodata or does this happen locally or automatically?

In all known databases such as MaxMind, IP2Location etc. our IPs are listed as German.

Please give me feedback on where we can release our IPs so that our customers can use our services again without any problems. Thank you very much.

BR Tim



Added TAGs
[edited by: Raphael Alganes at 3:07 PM (GMT -7) on 23 May 2024]
Parents Reply
  • 0 in reply to Vivek Jagad

    Hello Vivek,

    Thank you for your reply. MaxMind always has top priority for new IP addresses. All IP addresses are listed here as German. Nevertheless, there are Sophos firewalls that apparently see the IPs as Israel.

    We were able to verify this yesterday with a customer. After he released Israel in the geo filter, the website was accessible again. The problematic IP addresses have also existed for several months, so we don't need to wait any longer.

    MaxMind uses our geofeed file as a reference in addition to the manual report.

    How can this still be happening?

    BR Tim

Children
Unfiltered HTML