DOC-5092 - DNS Event Rate Monitoring

Summary:

This document outlines a method for monitoring DNS (Domain Name System) event rates within an organization without transmitting all DNS queries to the ESM (Enterprise Security Manager). The primary purpose of this monitoring is to detect spikes or sustained high event rates, which may indicate potential issues such as Denial of Service attacks or other anomalies. The document explains how organizations can monitor their DNS event rates effectively without burdening the system with unnecessary data. By focusing on key performance indicators like query rate and response time, it helps in identifying abnormal activity quickly. This approach is particularly useful for large organizations where DNS queries are abundant, ensuring efficient use of resources while maintaining a vigilant posture against potential security threats. Additionally, this document provides information about Jive for Microsoft Office, a plugin that allows users to create, open, and share Word, Excel, and PowerPoint documents using software like Windows and Office 2003, 2007, 2010, or 2013. To use the plugin, download it from irock.jiveon.com after entering login information for Jive Software's website. The document also includes navigation links to other parts of their site like Home, Top of page, Help, and Rooms, Contacts. It mentions that there are numbers on the screen showing people using the plugin and provides options for conversations.

Details:

This document outlines a method for monitoring DNS (Domain Name System) event rates without transmitting all DNS queries to the ESM (Enterprise Security Manager). The primary purpose of this monitoring is to detect spikes or sustained high event rates, which may signal potential issues such as Denial of Service attacks or other anomalies that require investigation. The document explains how organizations can monitor their DNS event rates effectively without burdening the system with unnecessary data. By focusing on key performance indicators like query rate and response time, it helps in identifying abnormal activity quickly. This approach is particularly useful for large organizations where DNS queries are abundant, ensuring efficient use of resources while maintaining a vigilant posture against potential security threats. This document is about using Jive for Microsoft Office, a plugin that helps create, open, and share Word, Excel, and PowerPoint documents. To use it, you need software like Windows and Office 2003, 2007, 2010, or 2013. First, download the plugin then install it by entering login info for a website called irock.jiveon.com. This helps the plugin connect correctly. The document also mentions Jive Software's version and provides links to other parts of their site like Home, Top of page, Help, and Rooms, Contacts. There are numbers on the screen showing people using it and some options for conversations.

Disclaimer:

The content in this post is for informational and educational purposes only. It may reference technologies, configurations, or products that are outdated or no longer supported. If there are any comments or feedback, kindly leave a message and will be responded.