Use Geolocation Service to identify location based on IP address

Products

• ProxySG Software - SGOS
• ISG Proxy
• Advanced Secure Gateway Software - ASG
• Intelligence Services

Issue/Introduction

Geolocation Service is available for Forward Proxy and Web Application Firewall with a valid license.

 

You must download the geolocation database to map the IP address and the associated country.

 

The Geolocation Service identifies the location of the source or destination IP addresses.

 

 

Resolution

Verify the license

To verify licensing for Geolocation Services on the EdgeSWG from the Management GUI:

Management Console > Maintenance > Licensing > View and look for license details in the

Intelligence Service Bundles section.

If you do not have a valid license, the proxy will not download the database and the Management Console will display Health Monitoring errors. The access logs will also display error messages about the subscription.

To enable Geolocation refer to the Admin Guide.

Using Geolocation in Policy

You can add geolocation policy through the Virtual Policy Manager (VPM) or using Content Policy Language (CPL).

In the VPM, the Client Geolocation object is available in the Source column in policy layers and a location restriction is available in the Action column.

Refer to the Visual Policy Manager Reference section for Client Geolocation and Set Geolocation restrictions.

In CPL, the client.address.country=<"country_name"> condition returns the country from which traffic originates, based on the client IP address or supplier.allowed_countries() for destination restrictions. 

For more information see Forward Proxy use cases and Reverse Proxy use cases.