FortiSIEM
FortiSIEM provides Security Information and Event Management (SIEM) and User and Entity Behavior Analytics (UEBA)
afornaris
Staff
Staff
Article Id 422724
Description This article describes the process to update the geo-location database in FortiSIEM to ensure accurate country information for IP addresses. The article provides a step-by-step guide on how to check for updates and manually update the database if necessary.
Scope FortiSIEM.
Solution

To update the geo-location database in FortiSIEM, follow these steps:

  1. Go to ADMIN -> Content Update to check for available updates.
  2. If an update is available, select the update and Install to install the update.

afornaris_0-1765406147297.png

 

  1. If no update is available, it may be necessary to wait for the next content update to be released.

afornaris_1-1765406147298.png

 

  1. Report any offending IP addresses in the FortiGuard IP Geolocation Appeal Form to help improve the geo-location database.

 

Additionally, set the relevant home country by navigating to RESOURCES -> Country Groups -> My Home and editing the current 'My Home' group or adding new groups.

 

Related article:

Technical Tip: How to apply a Content Update manually through the CLI