topic Advanced DNS Security Software Blade Location? in Firewall and Security Management

Advanced DNS Security Software Blade Location?

Timothy_Hall — Fri, 10 Mar 2023 16:03:03 GMT

OK I give up, where is the Advanced DNS Security Software Blade located for viewing/configuration in R81.20? Perhaps it is configured from the command line somewhere, as I can't find it in the SmartConsole. Or is this one of those "under the hood" black box things that Threat Prevention does?

Re: Advanced DNS Security Software Blade Location?

the_rock — Fri, 10 Mar 2023 18:03:09 GMT

I know every time I see your post, chances are only Phoneboy, Val or someone from R&D can answer it 😊. I also had been looking everywhere for it and so far no luck...

Andy

Re: Advanced DNS Security Software Blade Location?

MikeH — Fri, 10 Mar 2023 21:42:01 GMT

I don't think it's a separate blade per se, but part of NGTX suite (correct me if I'm wrong). Per the release notes:

AI Deep Learning prevents 5x more DNS attacks in real-time. The feature it is part of the NGTX license, and is enabled when the Anti-Bot and Anti-Virus blades are active For more information see:

sk178487 - ThreatCloudClosed DNS tunneling protection.

sk175623 - ThreatCloud Domain Generation Algorithm (DGA) protection.

Re: Advanced DNS Security Software Blade Location?

Timothy_Hall — Fri, 10 Mar 2023 22:15:30 GMT

Thanks, strange that they are calling this feature several different names. Looks like it is all under the hood anyway.

Re: Advanced DNS Security Software Blade Location?

PhoneBoy — Sat, 11 Mar 2023 04:29:47 GMT

We've been doing DNS Security via Anti-Bot/Anti-Virus for quite some time with the intelligence being in ThreatCloud.
I believe we've added some "under the hood" things in R81.20.

Re: Advanced DNS Security Software Blade Location?

Timothy_Hall — Mon, 15 May 2023 21:43:09 GMT

Any chance @PhoneBoy I can get a few sample log cards showing an Anti-Bot DNS Tunneling and Domain Generation Algorithm prevent action? I can't seem to find any samples anywhere, and the settings for these features don't appear to be exposed in the SmartConsole GUI. Thanks!

Re: Advanced DNS Security Software Blade Location?

PhoneBoy — Mon, 15 May 2023 22:35:50 GMT

I'll ask around, but I haven't seen any.