How to Verify PAN-OS IP Region Mapping

How to Verify PAN-OS IP Region Mapping

20008
Created On 09/25/18 17:39 PM - Last Updated 04/06/20 22:03 PM


Resolution

PAN-OS performs IP Address Region (Country) Mapping through an internal database which is updated weekly via content updates.  In some instances, an incorrect geographical categorization based on source or destination country can be erroneous.

In those instances it may be necessary to verify what the Palo Alto Networks device database shows for the country. The source or destination country of a particular address can be confirmed by running the following command from the CLI on the device.

 

CLI Command Examples:

> show location ip 212.124.122.180
212.124.122.180
United States

> show location ip 200.54.60.22
200.54.60.22
Chile

> show location ip 49.55.72.8
49.55.72.8
China

 

If there is any descrepency between what shows in the logs/CLI and what is reality, please contact Palo Alto Networks Support to have this issue addressed.

 

owner: bvandivier



Additional Information
  • IP addresses blocks for each country can be found here
  • Note: The link referenced above is a 3rd party link not owned or maintained by Palo Alto Networks.


Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClHHCA0&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments
Choose Language