For details on cookie usage on our site, read our Privacy Policy
Sinkhole dns-wildfire
- LIVEcommunity
- Discussions
- Cloud Delivered Security Services
- Threat & Vulnerability
- Re: Sinkhole dns-wildfire
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Printer Friendly Page
Sinkhole dns-wildfire
- Mark as New
- Subscribe to RSS Feed
- Permalink
09-24-2018 03:11 PM
How does the dns-wildfire threat category work? I've seen a log entry, but there isn't any traffic to the sinkhole IP. The action is sinkhole and reported as generic:malicious.domain1. I have confirmed that sinkhole does work for regular threat category dns and is reported as Suspicious DNS Query (generic:malicious.domain2).
- Mark as New
- Subscribe to RSS Feed
- Permalink
10-03-2018 03:56 PM
Sinkholing a DNS query does not guarantee a followup IP connection, especially if the Spyware has embedded intelligence to distinguish a true public IP vs a dummy sinkhole IP.
- DNS Sinkhole in Threat & Vulnerability Discussions
- DNS Security Service interfering with SPAM filter in Threat & Vulnerability Discussions
- Severity High and medium action are getting allow instead of block in Threat & Vulnerability Discussions
- Unable to resolve internal url's after implementing dns security. in Threat & Vulnerability Discussions
- Microsoft URL being DNS sinkholed suddenly? in Threat & Vulnerability Discussions
Show your appreciation!
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
