{"id":1376,"date":"2018-07-11T21:34:57","date_gmt":"2018-07-11T21:34:57","guid":{"rendered":"https:\/\/live-infoblox-blog.pantheonsite.io\/?p=1376"},"modified":"2020-05-06T10:27:05","modified_gmt":"2020-05-06T17:27:05","slug":"top-security-report-4-tunneling-traffic-by-category","status":"publish","type":"post","link":"https:\/\/www.infoblox.com\/blog\/community\/top-security-report-4-tunneling-traffic-by-category\/","title":{"rendered":"Top Security Report #4 – Tunneling Traffic by Category"},"content":{"rendered":"

This blog discusses the report #4 in a series of seven top security reports that can help you defend against bad actors.<\/p>\n

Here are the previous parts:\u00a0part 1<\/a>, part 2<\/a>,\u00a0part 3<\/a>,\u00a0part 4<\/a>\u00a0<\/p>\n

Tunneling Traffic by Category<\/h2>\n

This report is another security report that addresses data protection and malware mitigation.\u00a0 It lists DNS tunneling activities by specific categories and the percentage of events by DNS tunneling in a given timeframe.\u00a0 It\u2019s used frequently by\u00a0network\u00a0<\/em><\/strong>and\u00a0security admins<\/em><\/strong>\u00a0because it provides visibility into the top categories of DNS tunneling activities to prioritize risk mitigation efforts, and it helps defend against DNS tunneling-based malware insertion, data exfiltration, and anonymous IP traffic tunneling attempts.\u00a0 While some applications are designed to use DNS tunneling (e.g., Spotify, some anti-virus apps), a common use case occurs when security admins are looking deeper for the type of exfiltration activity in their environments to distinguish between malicious & legitimate requests.<\/p>\n\n\n\n\n\n\n\n\n\n
Top Report #4: Tunneling Traffic by Category<\/strong><\/td>\n<\/tr>\n
Service Area<\/strong><\/td>\nData Protection & Malware Mitigation<\/td>\n<\/tr>\n
Purpose<\/strong><\/td>\nLists DNS tunneling activities by specific categories & the percentage of events by DNS tunneling in a given timeframe<\/td>\n<\/tr>\n
Primary User<\/strong><\/td>\nNetwork & Security Admins<\/td>\n<\/tr>\n
Importance<\/strong><\/td>\nProvides visibility into the top categories of DNS tunneling activities to prioritize risk mitigation efforts and counters DNS tunneling-based malware insertion, data exfiltration & anonymous IP traffic tunneling attempts<\/td>\n<\/tr>\n
Use Case<\/strong><\/td>\nSecurity admins need to look deeper into exfiltration activity in their environments to distinguish between malicious & legitimate requests<\/td>\n<\/tr>\n
Available<\/strong><\/td>\nOut-of-the-box & requires Advanced DNS Protection (ADP)<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Report access is available through the security dashboard and requires ADP.\u00a0 It allows the admin to filter for timeframe, top Number of tunneling instances, members and views through a pie chart, data table or both.\u00a0 Analytics in this report helps teams guard against tunneling to infiltrate malware onto the network, exfiltrate data from the network and other unwanted tunneling activities.<\/p>\n

\"Top<\/p>\n

Here are the seven (7) security reports that can give you an edge over the bad actors.<\/p>\n