Forum Discussion
NimbostratusAFM configuration
Hi.
I have managed AFM in BIG IP 2000s. OS version is 11.5.2.
AFM configuration is below. Accept from China. set an iRule which redirects to a forbidden page from China.
I have found accesses from some IP addresses in China in servers behind of the BIG-IP. As the result of geoip_lookup which refers to Geolocation DB, these IP address are from China.
I am stuck which is the root cause, AFM configuration or Geolocation DB.
If anyone knows where the configuration manual or workaround, could you please give me the hyperlink or keywords to reach articles?
Thank you, ryh_skt
4 Replies
Brad_ParkerCirrus
It very well could be the geolocation DB if it is just some addresses. The DB is best effort as IPs can change their location. You can update you geolocation database with the most recent version to try and get more accuracy. https://downloads.f5.com/esd/ecc.sv?sw=BIG-IP&pro=big-ip_v11.x&ver=11.5.2&container=GeoLocationUpdates
ryh_skt_234553Hello Brad, Thank you for your answer. I missed telling you that geolocation DB is the latest. Sorry about this. The version is GEO-148 20151105.
Brad_Parker_139Nacreous
It very well could be the geolocation DB if it is just some addresses. The DB is best effort as IPs can change their location. You can update you geolocation database with the most recent version to try and get more accuracy. https://downloads.f5.com/esd/ecc.sv?sw=BIG-IP&pro=big-ip_v11.x&ver=11.5.2&container=GeoLocationUpdates
- ryh_skt_234553Hello Brad, Thank you for your answer. I missed telling you that geolocation DB is the latest. Sorry about this. The version is GEO-148 20151105.
