For example a newly assigned IP address not in theGeoIP data will generate a higher risk score than it would if the GeoIP database had been updated. Not updating the GeoIP data file regularly can cause some users to have a higher risk score and some a lower risk score.
In particular since most retail ISP's allocate IP addresses dynamically we can't assume that a home user will maintain the same IP address indefinitely, so when their IP address changes we can asses the probability that the same computer was reassigned a different IP address by comparing the old and newGeoIP data. Some of these values can then be used in Policies (For example DENY all requests originating in Nigeria) and also factor in to the overall risk score. If included in your contract RSA will provide an updated data file around the middle of each month through your RSA Central reporting account.īy looking up the Geoip data for the source IP of an incoming request we can determine the Country, State, City, ISP and approx Latitude and Longitude of the computer making the request. RSA provides geographic IP location information with your initial build. General Security Advisories and Statementsĭepending on an individual customers contract with RSA you may be supplied with a sample GeoIP file at the time of installation or you may have purchased the monthly update service described below.Outseer ® Fraud Manager On-Premise 14.x.
0 kommentar(er)
