IBM Support

Filtering DNS traffic with QRadar DNS Analyzer

Question & Answer


Question

In this course, you learn how the DNS Analyzer app can help you filter DNS traffic.

The app uses two types of filters that improve processing of the analytics algorithms. The first type of filter is based on the IBM X-Force Threat Intelligence feed, and the second is based on filtering lists built into DNS Analyzer, where you can add any domain to the allow list or the deny list. The video also demonstrates how DNS Analyzer reports a deny listed domain.


Duration: 8 Minutes
Follow the link in related information to view the course on the IBM Security Learning Academy

Answer

The Security Learning Academy is a full service learning platform, providing various training objects and instruction options.

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSBQAC","label":"IBM Security QRadar SIEM"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"All Version","Edition":" ","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Document Information

Modified date:
29 June 2022

UID

ibm11115391