This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

UTM mislabelling US-based IP addresses - blocking them.

I just found that the firewall is blocking US-based IP addresses with the (GEOIP) tag.
I found several instances of ping traffic from ByteDance at 147.160.181.250.
I checked other GeoIP services and they confirm this is US\California based.

I don't know how widespread this is.

Has anyone else noticed this?

Not clear if it's a concern.

Thanks,

Doug

This thread was automatically locked due to age.

Parents

0 Vivek Jagad 10 months ago

Hello SalishSwede ,

Thank you for reaching out to the community, do you think is wrongly categorize in the US region ?

vivek-utm:/home/login # geoiplookup 147.160.181.250
GeoIP Country Edition: US, United States

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 SalishSwede 10 months ago in reply to Vivek Jagad

No, I think it's ByteDance in Palo Alto.
It shouldn't be blocked. I guess I wasn't clear.
The Geolocation service of the UTM is blocking this traffic when it shouldn't.
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad 10 months ago in reply to SalishSwede

Hey SalishSwede , we can raise a service request at maxmind - https://support.maxmind.com/hc/en-us/requests/new

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 Vivek Jagad 10 months ago in reply to SalishSwede

Hey SalishSwede , we can raise a service request at maxmind - https://support.maxmind.com/hc/en-us/requests/new

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Technical Support, Global Customer Experience

Log a Support Case | Sophos Service Guide
Best Practices – Support Case | Security Advisories
Compare Sophos next-gen Firewall | Fortune Favors the prepared
Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel

Children

No Data