By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

WAF showing wrong country name but rule still working

0

Weird issues with a waf. Right now i have it blocking anything outside of the US and it has been working fine. Today i notice an allowed request from Belgium but when i went to look it was just a US ip for a Palo alto scanner.

Any idea why it is showing the wrong info or what to do to get it corrected?

Topics
Security, Identity, & ComplianceManagement & GovernanceAWS Well-Architected Framework
Tags
AWS WAFAWS Management ConsoleSecurity
Language
English
rob-spring
asked a year ago227 views
1 Answer
1

I suspect the IP database that AWS use may be out of date.. Personally blocking like this will never be 100% due to how and who manages the information from IANA etc.

profile picture
EXPERT
Gary Mclean
answered a year ago
profile pictureAWS
EXPERT
kentrad
reviewed a year ago
  • Rodney Lester
    a year ago

    AWS Database is updated "frequently," but your statement is correct. They are never 100% accurate.

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content