Hi,
I'm trying to get DNS queries to populate in our logs. Is this possible in R80.10? There's an old R77 article which states it can be achieved by enabling the IPS protection "Mismatched Replies" (or other related DNS protections)
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...
I've noticed in R80.10 the protection is set to "Inactive". Within the Smart Dashboard it states:
Supported Products:
Security Gateway: NGX R65, R70, R71, R75, R75.20 Connectra: R62CM, R66
Does anyone know if activating this protection will produce the same results as outlined in the above article? If not, is there another way to achieve this?
Thanks,
Jon
