This content has been marked as final. Show 2 replies
Are DNS Blocking events logged anywhere? How can I make a specific query in order to get a report of these events?
How can I test this to see if its working?
There is also a signature in HIPS - 6042 - that also refers to a DNS Rule violation, but I am not sure exactly what it is checking.
Any way to test if Sig 6042 is working?
It would be a nice added layer of protection, but I need to see if the "DNS Blocking" events are logged, and what signature 6042 is specifically looking for.