RSA Admin

Geolocating IP addresses

Discussion created by RSA Admin Employee on Feb 19, 2011
Latest reply on Feb 24, 2011 by David Bruskin
What sorts of solutions are folks using to geolocate IP addresses from enVision? I am looking to extract IP address transiting network filtering devices such as firewalls from enVision and want to aggregate those into ASN blocks, with country of origin included. I don't mind pulling events out of EE into Excel and running that through another tool, but what tool(s) have others used in this space? There are a lot of geolocating databases out there -- which are worth the money? DAvid