Introducing SOC Insights for BloxOne Threat Defense: Boost your SOC efficiency with AI-driven insights to eliminate manual work and accelerate investigation and response times. Read the blog announcement here.

Reporting

Reply

Alert when Queries Per Second reaches a threshold

Techie
Posts: 12
1378     1

I would like to have Infoblox send me an email when QPS on my external DNS resolvers spike. We currently have less than 50 QPS but we have been hit by DDoS attacks where QPS goes to 3000 QPS, how can I have infoblox altert me when QPS is at 1000?

 

Thank you

Re: Alert when Queries Per Second reaches a threshold

Superuser
Posts: 105
1378     1

Hi,

 

you can use the reporting to do alerting but you need to tweak some search about the query per second and make the search as alert. or you might need the Advance DNS protection to detect and block the ddos queries. Check on this link

 

https://www.infoblox.com/wp-content/uploads/infoblox-solution-note-infoblox-advanced-dns-protection....

 

Thanks

Showing results for 
Search instead for 
Did you mean: 

Recommended for You