Infoblox’s global team of threat hunters uncovers a DNS operation with the ability to bypass traditional security measures and control the Great Firewall of China. Read about “Muddling Meerkat” and the many other threat actors discovered by Infoblox Threat Intel here.

Reporting

Reply

Alert when Queries Per Second reaches a threshold

Techie
Posts: 12
1693     0

I would like to have Infoblox send me an email when QPS on my external DNS resolvers spike. We currently have less than 50 QPS but we have been hit by DDoS attacks where QPS goes to 3000 QPS, how can I have infoblox altert me when QPS is at 1000?

 

Thank you

Re: Alert when Queries Per Second reaches a threshold

Superuser
Posts: 105
1694     0

Hi,

 

you can use the reporting to do alerting but you need to tweak some search about the query per second and make the search as alert. or you might need the Advance DNS protection to detect and block the ddos queries. Check on this link

 

https://www.infoblox.com/wp-content/uploads/infoblox-solution-note-infoblox-advanced-dns-protection....

 

Thanks

Showing results for 
Search instead for 
Did you mean: 

Recommended for You