This website uses Cookies. Click Accept to agree to our website's cookie use as described in our Cookie Policy. Click Preferences to customize your cookie settings.
DNS Signature Lookup Timeout Error
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
- LIVEcommunity
- Discussions
- General Topics
- Re: DNS Signature Lookup Timeout Error
Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Printer Friendly Page
DNS Signature Lookup Timeout Error
Options
- Mark as New
- Subscribe to RSS Feed
- Permalink
08-18-2020 05:01 PM
I'm seeing quite a lot of messages logged in the syslog output from my PA VM-100 running PAN-OS 10.0.0:
Aug 19 07:31:29 firewall-1 1,2020/08/19 07:31:29,007051000047085,SYSTEM,general,2560,2020/08/19 07:31:29,,general,,0,0,general,medium,"DNS signature lookup timed out",1461969,0x0,0,0,0,0,,firewall-1,0,0,1970-01-01T10:00:00.000+10:00
What exactly does "DNS signature lookup timed out" mean?
My VM has two local DNS servers configured, which are functioning well and the PA VM has access to do direct external lookups as well if it needs to do so. It is located on the end of a quiet 250/100M internet fibre connection here in Australia, so connectivity and congestion is not an issue.
The DNS Signature Lookup Timeout (ms) value is set to 300 - far far above what should be necessary.
Can anyone explain the traffic flow that might cause this (do these DNS queries go direct, or via configured resolver, and over what transport) ?
If this is an error, how do I go about debugging it to find the root cause?
Thanks,
Reuben
4 REPLIES 4
Options
- Mark as New
- Subscribe to RSS Feed
- Permalink
08-18-2020 07:11 PM
Hi Mate,
I would suggest identifying which traffic is causing these errors. Is it legit DNS query being timed out. Worth playing with the timers once more try increasing more, maybe some queries are timing out genuinely.
If it is like hitting a wall again, would suggest getting in touch with Palo TAC. Could be cosmetic bug or genuine misconfiguraton.
Hope that helps,
VR
Thanks & Regards,
Varun Rao
Options
- Mark as New
- Subscribe to RSS Feed
- Permalink
09-27-2020 11:37 PM
Thanks VR.
Can you suggest how I would find out what traffic it is? The log message doesn't indicate much other than a DNS query timed out. I'm assuming it is to do with the DNS Security feature.
Can you or anyone else explain the traffic flow behind this feature? I can't find it documented anywhere.
Options
- Mark as New
- Subscribe to RSS Feed
- Permalink
05-20-2021 11:01 AM
Any resolution to this?
Options
- Mark as New
- Subscribe to RSS Feed
- Permalink
11-28-2021 03:23 AM - edited 11-28-2021 03:33 AM
Hi all,
I am also getting the same error in Paloalto. I changed the DNS signature lookup timeout to 2000 mseconds but still facing the same issue. Let me know if anyone got a solution or actual root cause of the issue
Related Content
- Threat Signature Pattern Lookup in Threat & Vulnerability Discussions
- DNS sinkhole vs DNS security in General Topics
- Content-ID - Hold Client Request in Threat & Vulnerability Discussions
- PA will not update malware signature from sample malware files (http://wildfire.paloaltonetworks.com/publicapi/test/apk) in General Topics
- DNS Signature Lookup Timeout Error in General Topics
Like what you see?
Show your appreciation!
Click Like if a post is helpful to you or if you just want to show your support.
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
LEGAL NOTICES
Copyright 2007 - 2023 - Palo Alto Networks