In the upcoming release of SIEM 11.5.0, changes are being implemented to SIEM geolocation and ASN support in the ESM and Receiver.
The release of SIEM 11.5.0, which updates geolocation IDs, impacts any place that geolocation values are used such as custom views, zones, reports, and rules:
- The existing values are no longer valid after you upgrade to 11.5.0. The values must be manually updated in any custom or customer-created content.
- All default geolocation dashboards, content packs, and rules are updated automatically at the time of the upgrade, and don't require any corrective action.
- ASN support is being withdrawn and is no longer supported. Any customer-created content using ASNs must be updated or removed.
If customer-created content uses the old geolocation data after you upgrade to 11.5.0, you might experience the following:
- Flash Geolocation views lock up the Flash sections of the ESM Administrator application, which requires an F5 browser refresh to work around.
- HTML Geolocation views display inaccurate geolocation data.
These problems persist until you update the geolocation data.
