topic DNS-Base traffic in Next-Generation Firewall Discussions

DNS-Base traffic

mshale — Tue, 09 Jan 2024 16:13:19 GMT

Hello Fellow Members,

Have been going through the ACC tab and noticed some rather abnormal traffic, have traffic that well beyond 800TB, and at times goes beyond 1000TB(1PB), is this normal given that fact I am looking at internal traffic (intrazone default) and looking at just the last 1 hour.

Application causing all the traffic appears to be DNS-base.

Please assist if any of you have ever come across such, and how did you overcome or rather get past it.

Regards in advance.

Re: DNS-Base traffic

Raido_Rattameister — Tue, 09 Jan 2024 16:46:58 GMT

It was a bug in PANOS and is fixed in latest version but versions that fix this have currently issues with GlobalProtects stability 🙂

What version are you running?

Re: DNS-Base traffic

mshale — Wed, 10 Jan 2024 06:49:23 GMT

Currently running PANOS ver11.0.2-h2, had to downgrade from PANOS ver11.1.0 as you mentioned, was giving me issues when it came to globalportect was giving me issues. But again, if it's a bug then I believe there isn't much one should be worried about.

Thank you.