FW Geo IP Tests

[Matt_S]

Hi Has anyone been able to test the Geo-IP functionality on a Fortigate FW to confirm what country an IP address belongs to ? I can see that this is possible on a Forti Manager as follows: xxxxxxxx$ diagnose system geoip ip xxx.xxx.25.218 xxx.xxx.25.218 : GB - United Kingdom I cannot however see how to perform the same test on a FW directly. I am testing this on v5.0,build3608,140409 (GA Patch 7) I ask this because the database is slightly out of date on the FW itself and I want to understand why my logs show this particular IP to be listed within country as " reserved" , whereas the Manager with it' s slightly newer database clearly shows this to belong to GB. I am sure their must be a command to test this on the FW directly via cli though I cant find it... Any idea' s anyone :o) Cheers Matt

[Carl_Wallmark]

Hi Matt, Is this what you are looking for? : FortiGate # diagnose firewall ipgeo ? country-list List all countries. ip-list List IP info of country. ip2country Get country info for the IP. override Print out all user defined IP geolocation data. copyright-notice Copyright note.

[Matt_S]

Hi Selective, Perfect !! I had not considered that I needed to be in the root VDOM on the FW to do this though your answer was spot on: xxxxxxxx (root) # diagnose firewall ipgeo ip2country xxx.xxx.25.218 xxx.xxx.25.218 is in country:GB Many thanks for your help Matt