topic Re: DNS dynamic feed block traffic testing in Network Security https://community.cisco.com/t5/network-security/dns-dynamic-feed-block-traffic-testing/m-p/3576391#M133094 <HTML><HEAD></HEAD><BODY><P>I also noticed that a laptop running Cisco Umbrellar resolves look ups from the malware list of domains.</P></BODY></HTML> Fri, 10 Nov 2017 00:26:53 GMT evan.chadwick1 2017-11-10T00:26:53Z DNS dynamic feed block traffic testing https://community.cisco.com/t5/network-security/dns-dynamic-feed-block-traffic-testing/m-p/3576390#M133092 <HTML><HEAD></HEAD><BODY><P>Hi Folks, </P><P>I've recently added a dns policy to my ACL with all the dynamic feed options selected. </P><P>I'm using a zone as my source and testing from this zone. </P><P>I"m unable to trigger a block and wondered if I have missed something?</P><P>I can confirm:</P><P>1/ cisco-dns-and-url-intelligence-feed is up to date : 2017-11-09 recent timestamp</P><P>2/ i'm testing a bunch of url's from <A href="http://mirror1.malwaredomains.com/files/domains.txt" title="http://mirror1.malwaredomains.com/files/domains.txt">http://mirror1.malwaredomains.com/files/domains.txt</A></P><P>if I test a few in my browser the proxy blocks it, so I would be confident that it should also be blocked via Cisco dynamic feed.</P><P>3/ i can see the traffic pass through the SFR device via, system support capture-traffic tcpdump</P></BODY></HTML> Wed, 08 Nov 2017 21:44:50 GMT https://community.cisco.com/t5/network-security/dns-dynamic-feed-block-traffic-testing/m-p/3576390#M133092 evan.chadwick1 2017-11-08T21:44:50Z Re: DNS dynamic feed block traffic testing https://community.cisco.com/t5/network-security/dns-dynamic-feed-block-traffic-testing/m-p/3576391#M133094 <HTML><HEAD></HEAD><BODY><P>I also noticed that a laptop running Cisco Umbrellar resolves look ups from the malware list of domains.</P></BODY></HTML> Fri, 10 Nov 2017 00:26:53 GMT https://community.cisco.com/t5/network-security/dns-dynamic-feed-block-traffic-testing/m-p/3576391#M133094 evan.chadwick1 2017-11-10T00:26:53Z