Dear all. I have configured IPS on firepower and I get such a message very often
[1:28190:4] "INDICATOR-COMPROMISE Suspicious .cc dns query" [Impact: Potentially Vulnerable] From "FIrewall" at Mon Feb 10 13:11:51 2020 UTC [Classification: A Network Trojan was Detected] [Priority: 1] {udp} x.x.x.x:65153 (unknown)->y.y.y.y:53 (unknown)
could anyone tell me what kind of error it is? do you think it is malicious or false positive? how can I know exact reason why message be appeared?
