Forum Discussion

Nishal_Rai's avatar
Nishal_Rai
Icon for Cirrocumulus rankCirrocumulus
Jan 11, 2024

Is f5 bigip asm policies(ip geolocation) database associated with Geoip database or ip intelligence?

Hello Everyone,


I wanted to know: how does the f5 bigip asm policies ip geolocation categorize the source IP as an anonymous proxy, and how does it maintain its database, like the update interval and accuracy?



K11176: Downloading and installing updates to the IP geolocation database
https://my.f5.com/manage/s/article/K11176



And are f5 bigip asm geolocation policies associated with geoip databases downloaded from f5 downloads, or associated with a f5 ip intelligence (add-on) subscription?

If it is associated with a geoip database, then what is the update interval, like the updated geoip database provided by the f5 networks?

Do the directory of geo ip /shared/GeoIP/ remain empty by default until the administrator does not manually download and install the updates to the IP geolocation database?

  • IPI - is a service provided by a 3rd party  "brightcloud".   it checks for updates often - automagically, it is not something that is provided or maintained by f5.
    https://www.brightcloud.com/

    Geolocation - is provided by f5.   Not sure of update frequency - but it usually a manual update.  This need to be maintained and if i were to take a stab at it - i would say its origin is  IANA, then cleaned and organized by f5 to be downloaded and implemented.

  • IPI - is a service provided by a 3rd party  "brightcloud".   it checks for updates often - automagically, it is not something that is provided or maintained by f5.
    https://www.brightcloud.com/

    Geolocation - is provided by f5.   Not sure of update frequency - but it usually a manual update.  This need to be maintained and if i were to take a stab at it - i would say its origin is  IANA, then cleaned and organized by f5 to be downloaded and implemented.