GeoIP Collection - User Guide - 2 - Cortex XPANSE - Cortex - Security Operations

Cortex Xpanse Expander User Guide

Product
Cortex XPANSE
Version
2
Creation date
2024-05-22
Last date published
2024-07-16
Category
User Guide
Solution
Cloud
Abstract

GeoIP collection lets Cortex Xpanse customers confirm their representation of their network distribution.

GeoIP collection lets Cortex Xpanse customers confirm that their representation of their network distribution is consistent with what they believe their global footprint to be. GeoIP data is especially important for security organizations to identify compliance violations, such as data residing in restricted locations, and drive efficient remediations-- customers leverage geoIP to determine infrastructure location, who owns the asset, and where to route notifications.

Cortex Xpanse’s geolocation data is displayed at the highest level of granularity for a given IP address. Geolocation data refreshes every two weeks. You can view GeoIP data in the Cortex Xpanse web application on the Assets Details page under Assets.