Getting an error when running the command 'diagnose geoip geoip-query <public ip>'

[Katyy0912]

Hi, 

I'm getting an error of message Error while getting geoip info (err:-11) when I run the command diagnose geoip geoip-query < public IP >. Checking GeoIP database is updated. 

> Can you help me May I know why I'm getting this error?

Thanks!

[smaruvala]

Hi,

- What is the FortiGate version you are running?

- Is the Geo IP database updated or outdated? You can refer the below KB to verify if you have the latest GeoIP database.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-How-to-update-the-GeoIP-database/ta-p/1932...

- usually, this error is seen when "globalgip.fortinet.net" is not resolvable by the firewall.

Regards,

Shiva

[Katyy0912]

Hi @smaruvala, 

- Version of ForiGate: 7.2.7

- Checking the Geo IP database is updated

[Sachin_Alex_Cherian_]

Hello,

Can you check if you have anycast disabled under 'config system fortiguard'.

Also check globalgip.fortinet.net can be resolved by FGT system DNS.

Another alternative command to use would be diagnose geoip ip2country <public ip>

I was able to find the below link in relation to geoip usage, hope it helps you.

https://community.fortinet.com/t5/FortiGate/Technical-Tip-Commands-to-verify-GeoIP-information-nd/ta-p/190341

Regards,

[Muhammad_Haiqal]

Hi @Katyy0912 ,

The Fortigate might not have the connectivity and not able to retrieve the information.

This KB may be helpful: https://community.fortinet.com/t5/FortiGate/Troubleshooting-Tip-Unable-to-connect-to-FortiGuard-serv...