Hi,
I'm obligated by content provider to block connectivity from proxy/foreign IP.
So, luckily I have Fortigate and Geo IP Address objects. :)
I can see that the DB used i MaxMind which does meet the requirements.
However, I can't find anywhere information about the following :
1. Does it include Proxies within my allowed region ? (MaxMind does supports this)
2. How and what is the update interval ? Can I force it to update to the MaxMind DB ?
Thanks!
//Chura CCIE, NSE7, CCSE+
Nominating a forum post submits a request to create a new Knowledge Article based on the forum post topic. Please ensure your nomination includes a solution within the reply.
Only online information (Fortinet support KB/document/google) that I could find that the GeoIP feature uses MaxMind is in the FortiWeb documentation and the copyright-notice for diagnose firewall ipgeo.
The link provided (above) shows how to update the database (execute update-geo-ip) and when the database was last updated (diagnose autoupdate versions).
But you likely need one of the FTNT techies to chime in on addressing your two questions fully.
NSE4/FMG-VM64/FortiAnalyzer-VM/6.0 (FWF30E/FW92D/FGT200D/FGT101E/FGT81E)/ FAP220B/221C
Thanks.
I just did update, why won't it update itself automatically ?
I just noticed its Max Ming GeoLite, so no proxies and update once a month only.
I guess I should look for other solutions.
But, still can't figure why the FGT won't update itself.
//Chura CCIE, NSE7, CCSE+
Thanks.
I just did update, why won't it update itself automatically ?
I just noticed its Max Ming GeoLite, so no proxies and update once a month only.
I guess I should look for other solutions.
But, still can't figure why the FGT won't update itself.
//Chura CCIE, NSE7, CCSE+
Chura wrote:why won't it update itself automatically ?
This confuses me aswell, why not make it part of the FortiGuard updates. We've just deployed FortiWeb and I had to manually download a geo-ip data file and import it.
Fortinet, what gives on this? Other vendors I work with automate this.
Select Forum Responses to become Knowledge Articles!
Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.