topic Re: Source IP issue. Urgent in General Topics

Source IP issue. Urgent

sahithyan.subbu — Sun, 14 Jun 2020 13:17:57 GMT

Hi team,

I am facing the source IP mismatch region .

This is the IP 41.139.156.142 which shows up from Kenya, i have confirmed from https://ping.eu & https://threatvault.paloaltonetworks.com/

but in firewall traffic log it show like this IP belongs to Germany.

I have blocked this IP in policy but why it is happening ? Why firewall shows mismatch source region ?

Does someone have insight on this issue ??

PAN OS version is 8.1.10.

Re: Source IP issue. Urgent

BPry — Mon, 15 Jun 2020 03:29:38 GMT

@sahithyan.subbu,

On a fully updated firewall this IP address is properly mapping to Kenya as it should be. You'll want to insure that you are running the latest content updates so that you have the latest database updates.

Re: Source IP issue. Urgent

OtakarKlier — Mon, 15 Jun 2020 21:46:31 GMT

Hello,

I have seen this in the past where one country/provider sells IP's to another. I have had to open a support case and work it that way. PAN then had to correct the database it gets from ARIN.

Regards,

topic Re: Source IP issue. *Urgent* in General Topics

Source IP issue. *Urgent*

Re: Source IP issue. *Urgent*

Re: Source IP issue. *Urgent*

topic Re: Source IP issue. Urgent in General Topics

Source IP issue. Urgent

Re: Source IP issue. Urgent

Re: Source IP issue. Urgent