The country flag in the source and destination columns is a cosmetic feature that indicates the country of the IP according to an internal mapping DB
In some cases, the flag may not match the country according to the IP address that the Internet Assigned Numbers Authority (IANA) has assigned for that country
Cause
The internal mapping database (ip2country.csv) on the Security Management Server / Multi-Domain Management Server / SmartEvent Server / Log Server may not be up to date.
This file is not automatically updated, but is updated in new versions.