Upcoming changes to geolocation and ASN support in SIEM 11.5.0

Technical Articles ID: KB94798
Last Modified: 2021-11-17 16:59:36 Etc/GMT

Environment

SIEM Enterprise Security Manager (ESM) 11.5.x
SIEM Event Receiver (Receiver) 11.5.x

Summary

In SIEM 11.5.0, changes are implemented to SIEM geolocation and ASN support in the ESM and Receiver.

The release of SIEM 11.5.0 updates geolocation IDs, which impacts any place that geolocation values are used such as custom views, zones, reports, and rules:

The existing values are no longer valid after you upgrade to 11.5.0. The values must be manually updated in any custom or customer-created content.
All default geolocation dashboards, content packs, and rules are updated automatically at the time of the upgrade, and don't require any corrective action.
ASN support is being withdrawn and is no longer supported. Any customer-created content using ASNs must be updated or removed.

If customer-created content uses the old geolocation data after you upgrade to 11.5.0, you might experience the following:

Flash Geolocation views lock up the Flash sections of the ESM Administrator application, which requires an F5 browser refresh to work around.
HTML Geolocation views display inaccurate geolocation data.

These problems persist until you update the geolocation data.

Solution

It is possible to install a pre-upgrade checklist script that will assist users in determining their current geolocation use.

The script is available on the Product Downloads site.

Log on with your support credentials.
Select SIEM - All Products as the product, and then click Search.
Click SIEM System Advisor Geolocation Checker.
Click Download Update.

We have also created a detailed list of post-upgrade checks available on our Product Documentation site to assist customers in identifying and updating their custom Geolocation data after upgrade.

See the System Advisor Geolocation Checker Release Notes for details.

Affected Products

Languages:

This article is available in the following languages:

Knowledge Center

Upcoming changes to geolocation and ASN support in SIEM 11.5.0

Environment

Summary

Solution

Affected Products

Languages:

Title

Title

Knowledge Center

Upcoming changes to geolocation and ASN support in SIEM 11.5.0

Environment

Summary

Solution

Affected Products

Languages:

Choose your region

Title

Title