DNS Sinkholing - missing related traffic logs on windows machines

rufat87 — Fri, 23 Dec 2022 22:11:58 GMT

Since we configured dns sinkholing for some stuff like parked, malware domains, we are seeing related threat logs but no associated traffic logs pointing us to the source behind the queries. Recently we tested it on Mac machines and we do see traffic logs to sinkhole IP, but it doesn't seem to be working on the windows hosts.

Has anyone experienced such or similar behavior? Any help/suggestions are very appreciated.

Re: DNS Sinkholing - missing related traffic logs on windows machines

JayGolf — Wed, 28 Dec 2022 03:50:36 GMT

Hi @rufat87 ,

What version of PAN-OS are you running?

topic Re: DNS Sinkholing - missing related traffic logs on windows machines in General Topics

DNS Sinkholing - missing related traffic logs on windows machines

Re: DNS Sinkholing - missing related traffic logs on windows machines