-
Title
GeoLite2 database integration -
Description
How to integrate MaxMind Geolocation Database with the SDA -
Resolution
For those that have configured external access to the SDA UI, there is the ability to integrate a Geolocation Database to see where a connection is coming from based on public IP addresses, with a few extra steps.
In order to use the location data of the Recent Sessions feature, the user must upload the GeoLite2 database from Maxmind, which is a free download to lookup public IP addresses. In order to gain access to the database a user must create a free account on the MaxMind website, https://dev.maxmind.com/geoip/geoip2/geolite2/, and agree to the terms of their EULA, https://www.maxmind.com/en/geolite2/eula.
Once an account has been created, from the account summary page, click the Download Files link under GeoIP2/GeoLite2. The database list page will have both CSV files and MMDB files listed. Only the MMDB files will work on the SDA. The GeoLite2 Country and GeoLite2 City database will probably prove to be the most beneficial. The country database will associate a public IP Address to a country of origin, whereas the city database will associate the city, state (providence, etc) and country.
Once the file is downloaded (it will be a gzip file), navigate to Settings | Control Panel | General Settings and scroll down to the MaxMind Geolocation Database section. Here you can select the gzip file you downloaded or drag and drop it into the “drop file here” zone. Click on the “Update Database” button. The SDA Current Status indication changes from Idle to “Installing Maxmind Database.” Once the indicator returns to Idle, the installation is complete.
Installing or applying a different database file will reprocess all recent sessions, updating the information for the location field of all public IP Addresses. This means you can switch from country to city database (or vice-versa) at any time and the location field will update to reflect the database you have installed. In addition, MaxMind updates their databases often, so you can apply an updated gzip file at any time.