GeoIP data collection - GeoIP data collection confirms that your actual network distribution is consistent with what you believe your global footprint to be. - Administrator Guide - Cortex XDR - Cortex - Security Operations

Cortex XDR 5.x Documentation

Product
Cortex XDR
License
XDR + Cloud
Creation date
2025-07-13
Last date published
2026-06-04
Category
Administrator Guide
Abstract

GeoIP data collection confirms that your actual network distribution is consistent with what you believe your global footprint to be.

Attack Surface Management (ASM) in Cortex XDR geoIP data collection enables you to confirm that your actual network distribution is consistent with what you believe your global footprint to be. GeoIP data is especially important for security organizations to identify compliance violations, such as data residing in restricted locations, and to drive efficient remediations where customers leverage geoIP data to determine infrastructure location, who owns the asset, and where to route notifications.