Anti-Spyware - DNS Sinkhole - Interpreting BPA Checks - Objects
This video provides information about the DNS Sinkhole check and how it will behave when a machine accesses a malicious domain.
The DNS Sinkhole feature enables the ability to identify the compromised or infected host machines that are accessing malicious domains. The best practice assessment check ensures DNS sinkhole and packet capture is enabled on the Anti-Spyware profile.
For more information on DNS Sinkhole, please review the following articles: