NetWitness 12.5.1 introduces an approach to import GeoIp files on the Content Library page for customers not connected to the NetWitness live. Users connected to NetWitness Live will continue to receive automatic updates with the latest GeoIp files as usual.
By identifying the geographical origins of network traffic, users can protect sensitive data and systems, ensuring that only authorized personnel from specific regions can access certain resources. Users must first download the GeoIp files from the NetWitness Live portal.
To download the GeoIp Files
- Login to the NetWitness Live using your Credentials.
-
In the left panel, click Content.
-
In the Search Content option, select the latest platform version and click Search.
-
Select the required NW GeoIp and NW GeoIp Lite package from the list. Click Generate Content Package.
A Multiple Content Download window is displayed. Select the Include Dependencies check box and click Generate Package Link.
-
The files to download will be available in the Package Downloads page. In the Status column, click Download to initiate the download.
To import the GeoIp files
- Go to (CONFIGURE) > Policies.
- In the policies panel, click Content.
- In the left panel, click Content Library.
-
Click More > GEO IP.
-
In the GEO IP tab, Import option is displayed.
-
Click Import. Select the packaged file from the Downloads folder.
-
Click Import. The deployment can take some time, especially for large files. The process automatically updates all necessary metadata and information once the files are fully deployed.
The GeoIp files are deployed. The latest version change is displayed in the version column.
Note: An error message is displayed if the user imports a lower version from the existing GeoIP files.