GeoIP collection lets Cortex Xpanse customers confirm that their representation of their network distribution is consistent with what they believe their global footprint to be. GeoIP data is especially important for security organizations to identify compliance violations, such as data residing in restricted locations, and drive efficient remediations-- customers leverage geoIP to determine infrastructure location, who owns the asset, and where to route notifications.
Cortex Xpanse’s geolocation data is displayed at the highest level of granularity for a given IP address. Geolocation data refreshes every two weeks. You can view GeoIP data in the Cortex Xpanse web application on the Assets Details page under Assets.