Exploiting DNS

[yusufsesay]

Is there a way to receive an active report when a DNS is being currently exploited within the firepowers? How do I create that report?

[Enes Simnica · Accepted solution]

@yusufsesay If firepower reports are scheduled, u can’t generate a truly live report. But to track active DNS exploitation, use the DNS Security Intelligence events in dashboards, and configure alerts/correlation policies for real-time notifications.

PEACE!

-Enes
CCNP x2 Enterprise
Your Friendly Networking Ninja

[yusufsesay]

Thank you so much!

[Enes Simnica]

Welcome G!