Differences in country detection between talos and SNA

[kelvin ortega]

Hi team,

Differences have been observed between talos and SNA when they detect the country of origin of the traffic. For example, this IP 185[.]233[.]19[.]223 is from Pakistan and source host group from United States (according to SNA) but in talos its origin is from Hong Kong. Can something be done to keep the feed updated with Talos information?

Greetings

[mattrobb · Accepted solution]

SNA does not currently use Talos for geolocation of IPs and does not currently have the ability to update the geolocation DB with Talos information. The geolocation DB is updated during product patching or upgrade. If you are on an older version of SNA, upgrading to the current version might help.