Applies To: F5 Big IP DNS
BIG-IP DNS ensures that the users are connected to the best site and delivers on-demand scaling for DNS and global apps. It hyper scales authoritative DNS up to 100 million query responses per second (RPS) and controls DNS traffic.
EventTracker helps to monitor events from F5 Big IP DNS. Its dashboard, alerts, and reports will help you to find the detailed information of all events. Alerts determines and stops the attack and suspicious activities in real-time, and Dashboards helps to analyze all the security-related events in a single console.
EventTracker's Knowledge pack for F5 Big IP DNS delivers advanced DNS statistics for Administrators/Analysts, with enhanced detailed data for profiles such as query name, query type (A, CNAME, NS, RRSIG, AAAA, SRV, and “other” types) with top requests, top responses, domain name, source IP addresses, server IP address and percentage counts.
EventTracker’s F5 Big IP DNS knowledge pack allows you to quickly see an overview of your DNS environment. It helps to make a defense plan and policies to protect against DNS attacks and ensure DNS availability and protection during DNS attacks or volume spikes by blocking access to malicious IP’s and rouge domains/sites.
EventTracker Knowledge Pack for F5 Big IP DNS allows you to monitor the following components:
Once F5 Big IP DNS is configured to deliver events to EventTracker Manager; alerts, dashboards, and reports can be configured into EventTracker.
The configuration details are consistent with EventTracker version 9.X and later, and F5 Big IP DNS.
To configure F5 Big IP DNS to send logs to EventTracker, refer the How to Guide.
For more information please refer the Integration guide.