Threat: DNS.TXT.Records.Tunneling how to stop this...

Support Forum

The Forums are a place to find answers on a range of Fortinet products from peers and product experts.

Since we have installed our Fortinet Server and Analyzer over a year ago I have been seeing constant logs indicating the threat of DNS.TXT.Records.Tunneling. The source is the domain controller and the destination is googles DNS 8.8.8.8. To me, it appears that DNS queries sent from end users workstations to the domain controller and then to google are triggering this Application Control alert. How can I stop this specific event to stop filling up my logs and skewing my threat reports?

2371

0 REPLIES 0

Top Kudoed Authors

User

Count

1713

1093

752

447

231

Broad. Integrated. Automated.

The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.

Terms of Service
Privacy Policy
GDPR
Cookie Settings

Threat: DNS.TXT.Records.Tunneling how to stop this from being logged for DNS server?

Nominate a Forum Post for Knowledge Article Creation