This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject
ABOUT CHECKMATES & FAQ
Create a Post
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Help

Are you a member of CheckMates?

×
Sign in with your Check Point UserCenter/PartnerMap account to access more great content and get a chance to win some Apple AirPods! If you don't have an account, create one now for free!
Amit_Singh4
Participant
‎2018-08-07 02:26 AM

Checkpoint R80.10 - IPS Logs

I can see many hits in IPS logs from "no-reverse-dns-configured.com (89.248.172.196)" to internal public facing servers under protection name "ZmEu Security Scanner". There are approximate 1K hits from this source which is considered as Critical.

My question is if i enable Prevent for this signature will it going to impact on DNS resolution.

Thank you.

Amit

2 Replies
_Val_
Admin
Admin
‎2018-08-07 03:13 AM

Hello Amit, I have moved your post to Threat Prevention, as more appropriate space.

Setting the mentioned IPS protection to protect will not impact your DNS funcionalities

0 Kudos
Amit_Singh4
Participant
‎2018-08-07 03:19 AM
In response to _Val_

Thank you Valeri  for inputs.

Regards

Amit