4 Replies Latest reply on May 9, 2016 7:47 AM by coupe2t

    Is it possible to exclude specific NTA events from DNS resolution?

    coupe2t

      Hi all,

       

      As per title really, basically we received an alert over a month ago now due to Solarwinds sending a Reverse DNS lookup for a known malware site.

       

      This appears to have been triggered due to Solarwinds seeing traffic to the malware site, and since trying to periodically resolve it.

       

      We have managed to clear the route of the issue, but as the event still lives in Solarwinds, it still periodically tries to resovle the IP, which then triggers the alert from the Firewall.

       

      So my question is, can you select somewhere for an endpoint not to be resolved under Persistent DNS setup in NTA?

       

      Thanks

       

      J