Monitoring Trusted DNS Violations

BloxOne Service Edge provides a monitoring service that allows you to monitor traffic violations again your list of trusted DNS servers. 

To monitor violations against trusted DNS servers:

1. In the Cloud Services Portal, click Manage > Service Edge > Monitor > Trusted DNS Violations.
2. On the Trusted DNS Violations page, review the following:
   
   • TIME STAMP: The time stamp when the DNS traffic was captured. Note that Service Edge aggregates DNS traffic logs every minute and refreshes information on this page every five minutes.

   • EDGE:: The name of the edge.

   • SERVICE: The protocol and destination port used to report trusted DNS violations.
   • SOURCE IP: The source IP or network address of the violation.
   • DNS SERVER: The name or IP address of the DNS server on which the violation happened.
   • ACTION: The action being taken for the DNS traffic.

You can do the following on this page:

• Filter information on this page by choosing a specific timeframe from five minutes to 24 hours by clicking the interval from the Show drop-down menu. For example, if you choose 15 minutes, this page displays information for the past 15 minutes. Service Edge stores DNS violation traffic data for up to 24 hours.
• Click Refresh to refresh the data in the table.
• Choose a violation from the list and view detailed information in the right panel.
• While monitoring DNS violation traffic, decide on whether certain violations warrant corrective actions.