We have access to external(outside networks) Web sites blocked for our servers, and someone noticed that our Ciscoworks box is constantly querying our internal DNS servers for cisco.com. So much so they have asked me to disable whatever process is performing the queries . Can someone explain how to accomplish this or point me to documentation that might?
Its pretty common to partition off servers from the Internet in order to close it as an attack vector on our network resources.
I've thought of putting Cisco.com in the hosts file , and then direct that to the loopback address. While it's definitely a solution, I'd rather use built-in settings to stop the queries altogether.
