Our ISP has started to use a cache server and now NTA is pretty useless. The odd thing is I don't see these cached server when running reports on our web filter it still shows the actual internet domain instead of the ISP cached server. How can I fix this so NTA is usable again?
For example if I view top endpoints its full of hostnames like below instead of seeing the actual hostname
ggc.isp.com (ip address)
ggc.isp.com (ip address)
akm.isp.com (ip address)
Its even worse when looking at top conversations, since the ISP is caching things like google, netflix, apple, amazon I lost the ability to see what is consuming all the internet bandwidth. Conversations look like this
Between internal PC and ggc.isp.com (IP)
Between internal PC and ggc.isp.com (IP)
Between internal PC and akm.isp.com (IP)
What can be done? Is this a NTA DNS issue, a netflow issue? Again if I view top domains on my webfilter I don't have this problem.